Critical NGINX Bug, New 7-Zip Exploit, Hugging Face AI Breach, SonicWall Zero-Days

THN Daily Updates When Your AI Goes Rogue: Hands-On Findings and What They Mean for Enterprise Security Learn how to secure agentic AI and stop credential leaks. Join Okta's Jeremy Kirk to explore OpenClaw vulnerabilities and identity-first AI governance. Download Now Sponsored LATEST NEWS Jul 20, 2026 Mythos Didn't Break Your Security Program. Your Exposure Window Could. The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would Mythos add to an already overloaded pipeline? How quickly would the flood of AI-driven discovery o... Read More New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day In... Read More Why Modern Phishing Emails Are Harder to Spot Than Ever AI-generated phishing is getting harder to spot. Learn how to recognize the red flags before you click. Read More World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to t... Read More Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx... Read More The Most Monitored Device in the Company is Still Hiding Dangerous Access Developer laptops accumulate live credentials across files, caches, AI tools, and logs, giving attackers valid access without exploiting a flaw. Read More SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June ... Read More New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a working proof-of-concept is public. The story below reflects all of... Read More When Your AI Goes Rogue: Hands-On Findings and What They Mean for Enterprise Security Learn how to secure agentic AI and stop credential leaks. Join Okta's Jeremy Kirk to explore OpenClaw vulnerabilities and identity-first AI governance. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi