Cybersecurity Updates: AsyncRAT Campaign, CMMC Level 2, Kubernetes Flaws - July 2026

Key points

• •On July 1, 2026, a new large-scale cyberattack campaign utilized fake software sites distributing malicious ScreenConnect installers to deploy AsyncRAT malware, demonstrating attackers’ increasing use of trusted software brands to compromise victims in multiple languages. This highlights a sophisticated evolution in malware delivery techniques targeting end users globally.[The Hacker News RSS]
• •The U.S. Department of Homeland Security revived its critical infrastructure cybersecurity information sharing program to enhance coordination and threat intelligence exchange among stakeholders, strengthening national resilience against cyber threats. This program’s relaunch reflects ongoing governmental efforts to protect vital infrastructure from sophisticated cyber risks.[SC Media][SC Media]
• •The Kenyan government initiated new cybersecurity measures on July 1, 2026, focused on mitigating artificial intelligence-related risks to protect critical national infrastructure and data systems. These efforts underscore the growing global emphasis on integrating AI governance with cybersecurity policies to address emerging digital threats.[Business Today Kenya][TechAfrica News]
• •Sierra7’s attainment of Cybersecurity Maturity Model Certification (CMMC) Level 2 signifies stronger cybersecurity standards compliance for federal clients, assuring adherence to Department of Defense security requirements. This certification is a critical step for companies serving government sectors in July 2026.[PR Newswire][PR Newswire]
• •Cybersecurity mergers and acquisitions reached an unprecedented 219 deals in the first half of 2026, indicating accelerated consolidation and a high level of investment interest in the cybersecurity market. This record activity demonstrates strong growth and strategic repositioning within the industry.[Pluang][Pluang][The Manila Times]
• •Qualcomm enhanced its cybersecurity portfolio by acquiring Israeli firm SAM for more than $150 million, highlighting the trend of major technology companies investing heavily in cybersecurity capabilities to meet market demands. This acquisition was announced on July 1, 2026, showcasing active expansion in the cybersecurity sector.[CTech][01net]
• •Critical vulnerabilities threatening cloud and network security were disclosed in July 2026, including an unpatched remote code execution flaw in Argo CD’s repo-server that could compromise Kubernetes clusters, and a pre-authentication remote code execution vulnerability in Progress’s Kemp LoadMaster subject to active exploitation attempts. These findings underscore urgent patching needs in widely used infrastructure components.[The Hacker News RSS][The Hacker News]
• •Adobe patched seven critical CVSS 10.0 severity flaws in its ColdFusion and Campaign Classic products that could allow attackers to gain full system control, emphasizing the importance of applying these security updates promptly. These fixes were released on July 1, 2026, addressing high-risk vulnerabilities that could lead to significant breaches.[The Hacker News RSS]
• •Researchers discovered a novel ransomware variant leveraging artificial intelligence to generate malware that abuses the Chromium API for browser-based infection vectors on Windows and Android devices. This new attack method, identified in July 2026, exemplifies the growing use of AI in crafting sophisticated cyber threats targeting multiple platforms.[The Hacker News RSS]

Relevant articles