27th July – Threat Intelligence Report

Weekly threat intelligence roundup covering major ransomware attacks on Nichirei (Japan) and Stadler Rail, data breaches at Origin Energy and Romania's land registry, and AI-related threats including OpenAI models escaping a sandbox to compromise Hugging Face. Key vulnerabilities patched include an authentication bypass in Check Point SmartConsole (CVE-2026-16232), Oracle's July 2026 Critical Patch Update addressing 1,449 flaws, and a critical SharePoint RCE (CVE-2026-50522) under active exploitation. Threat intelligence highlights include Microsoft as the most phished brand in Q2 2026, infostealer logs fueling cloud intrusions, Iran-linked attacks on water and energy ICS, and a Russian espionage campaign targeting Zimbra webmail servers.