IT security 2026-07-26

Level Tense — 62/100 — 2026-07-26

Tense day: 10 stories ranked, 4 of the top 10 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Cl0p-linked actors exploit internet-exposed PTC Windchill and FlexPLM in data extortion campaign (70/100).

1. Cl0p-linked actors exploit internet-exposed PTC Windchill and FlexPLM in data extortion campaign — 70/100
2. Public GitLab exploit enables command execution by authenticated project contributors — 70/100
3. SourTrade malvertising assembles Windows malware inside victims' browsers — 58/100
4. Insurance Phishing Evolves to Real-Time Hijacking — 40/100
5. DevMan ransomware service provides centralized tools for affiliates — 36/100
6. Attackers target Fastjson 1.x flaw enabling unauthenticated code execution — 19/100 (CVE-2026-16723)
7. Chromium CVE-2026-16806 use-after-free in WebMCP fixed; Microsoft Edge ingests fix — 19/100 (CVE-2026-16806)
8. Chromium CVE-2026-16805 use-after-free in Blink fixed; Microsoft Edge ingests fix — 18/100 (CVE-2026-16805)
9. Chromium CVE-2026-16804 use-after-free in Input fixed; Microsoft Edge ingests fix — 18/100 (CVE-2026-16804)
10. Chromium CVE-2026-16807 out-of-bounds write in Codecs fixed; Microsoft Edge ingests fix — 18/100 (CVE-2026-16807)