Cyber Security News

Hacking Editorial Brief — July 21, 2026

South Korea Investigates Breach of Diplomatic Database, North Korea Attribution Examined

South Korean authorities are investigating a breach of a government-run diplomatic academy database containing approximately 10,000 records of current and retired diplomats. The compromised system held sensitive information on nearly the country's entire diplomatic corps. Officials are examining potential involvement by foreign state-backed hacking groups, with early focus on possible North Korean threat actors, though no attribution has been confirmed. The breach represents a significant intelligence collection opportunity for adversaries targeting South Korean foreign policy operations and personnel.

Microsoft Patches Record 570 Vulnerabilities Including Three Zero-Days

Microsoft's July 2026 Patch Tuesday addresses 570 security flaws, marking a record volume for the company. Three zero-day vulnerabilities are included: CVE-2026-56155, an Active Directory Federation Services elevation of privilege flaw being actively exploited to gain administrator privileges, and two additional zero-days—one actively exploited and one publicly disclosed. Separately, Ukraine's CERT-UA issued warnings about Russian operators deploying fake CAPTCHA checks that trick users into executing malicious commands on their own systems. Russian FSB Center 16 operators continue targeting critical infrastructure through exploitation of misconfigured routers and vulnerable networking devices. In the cryptocurrency sector, extortion groups ShinyHunters and ShadowByt3$ claim to have exfiltrated patient data from healthcare giant Abbott, though the company has not confirmed the extent of the incidents under investigation.

Sources: Bloomberg · Reuters · Bleeping Computer · Malwarebytes · Bitdefender · JD Supra · Malwarebytes