Major Incidents or Breaches

  • A data breach at Centers Laboratory has impacted 540,000 individuals. The WorldLeaks extortion group has claimed responsibility, stating they exfiltrated 720 GB of data from the healthcare testing and laboratory services provider [9].
  • Progress has instructed customers to manually shut down ShareFile Storage Zone Controller servers due to an ongoing investigation into a credible security threat [8].

Newly Discovered Vulnerabilities

  • Two maximum-severity zero-day vulnerabilities affecting the iCagenda and Balbooa Forms extensions for Joomla have been added to CISA’s Known Exploited Vulnerabilities catalogue, with reports indicating active exploitation [2].

Notable Threat Actor Activity

  • A misconfigured Python web server exposed details of three active Evilginx phishing campaigns targeting Microsoft 365 users [1].
  • The WorldLeaks group is responsible for the Centers Laboratory breach, claiming theft of significant volumes of sensitive data [9].

Trends, Tools, or Tactics of Interest

  • The RedHook Android malware has adopted a new technique by abusing Android’s Wireless Debugging (Wireless ADB) feature to gain shell-level access without requiring a computer connection [5].
  • Increased scanning activity targeting MCP servers and AI assistant credentials has been observed, indicating a trend towards automated reconnaissance for these assets [6][7].

Sources#

  1. Centers Laboratory Data Breach Affects 540,000 Individuals - securityweek.com
  2. Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns - securityweek.com
  3. iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days - thehackernews.com
  4. Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 - thehackernews.com
  5. RedHook Android malware now uses Wireless ADB for shell access - bleepingcomputer.com
  6. Someone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th) - isc.sans.edu
  7. ISC Stormcast For Monday, July 13th, 2026 https://isc.sans.edu/podcastdetail/10004, (Mon, Jul 13th) - isc.sans.edu