Cybersecurity Brief – 2026-07-06

Major Incidents or Breaches

Researchers demonstrated a new attack, TrojPix, which enables data exfiltration from air-gapped systems by manipulating on-screen pixels to emit electromagnetic signals via video cables, allowing nearby receivers to capture sensitive information^[1].
A vulnerability in the Opera GX browser allowed malicious websites to silently install add-ons which could then be used to steal data from pages visited by the user^[3].

Newly Discovered Vulnerabilities

A flaw in Opera GX enabled automatic installation of browser mods from malicious sites, facilitating data theft from visited web pages without user interaction^[3].

Notable Threat Actor Activity

Security researchers identified a new Java-based remote access trojan, QuimaRAT, offered as malware-as-a-service and capable of targeting Windows, Linux, and macOS systems^[2].

Trends, Tools, or Tactics of Interest

The TrojPix attack highlights ongoing research into side-channel data exfiltration methods targeting air-gapped environments, specifically leveraging electromagnetic emissions from video cables^[1].
The QuimaRAT trojan demonstrates continued cross-platform targeting and the prevalence of malware-as-a-service models in the threat landscape^[2].
Researchers described SkillCloak, a technique that allows malicious AI agent skills to evade static code scanners by using self-extracting packing methods, enabling malware to bypass existing detection tools^[4].
Development of the Flipper Zero firmware is set to continue with increased reliance on community contributions, following a reduction in the internal development team^[5].