RedHook on DanSec Daily

Cybersecurity Brief – 2026-07-13

Mon, 13 Jul 2026 00:00:00 +0000

Major Incidents or Breaches

A data breach at Centers Laboratory has impacted 540,000 individuals. The WorldLeaks extortion group has claimed responsibility, stating they exfiltrated 720 GB of data from the healthcare testing and laboratory services provider ^[9].
Progress has instructed customers to manually shut down ShareFile Storage Zone Controller servers due to an ongoing investigation into a credible security threat ^[8].

Newly Discovered Vulnerabilities

Two maximum-severity zero-day vulnerabilities affecting the iCagenda and Balbooa Forms extensions for Joomla have been added to CISA’s Known Exploited Vulnerabilities catalogue, with reports indicating active exploitation ^[2].

Notable Threat Actor Activity

A misconfigured Python web server exposed details of three active Evilginx phishing campaigns targeting Microsoft 365 users ^[1].
The WorldLeaks group is responsible for the Centers Laboratory breach, claiming theft of significant volumes of sensitive data ^[9].

Trends, Tools, or Tactics of Interest

The RedHook Android malware has adopted a new technique by abusing Android’s Wireless Debugging (Wireless ADB) feature to gain shell-level access without requiring a computer connection ^[5].
Increased scanning activity targeting MCP servers and AI assistant credentials has been observed, indicating a trend towards automated reconnaissance for these assets ^[6]^[7].

Sources

Centers Laboratory Data Breach Affects 540,000 Individuals - securityweek.com
Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns - securityweek.com
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days - thehackernews.com
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 - thehackernews.com
RedHook Android malware now uses Wireless ADB for shell access - bleepingcomputer.com
Someone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th) - isc.sans.edu
ISC Stormcast For Monday, July 13th, 2026 https://isc.sans.edu/podcastdetail/10004, (Mon, Jul 13th) - isc.sans.edu