Cybersecurity Highlights: Zimbra Flaw, Linux Bug & jscrambler Infostealer - July 11, 2026

Key points

• •Researchers documented espionage campaigns exploiting the Balochistan Police portal from February 2024 to April 2026, orchestrated by threat actors linked to China and India. These sustained multi-group attacks weaponized governmental portals for covert intelligence operations affecting Pakistani law enforcement agencies.[The Hacker News RSS]
• •The first half of 2026 witnessed several large-scale cybersecurity breaches impacting multiple organizations across sectors. Detailed analyses reveal the magnitude and diversity of data compromised, emphasizing the escalating risk landscape faced by enterprises worldwide.[Mashable]
• •On July 9, 2026, the UK government unveiled the Agentic AI Defense Plan with an industry collaboration pledge to strengthen AI and cybersecurity defenses. This initiative reflects a strategic national approach to counter emerging AI-related cyber threats and secure critical AI infrastructure.[SecurityWeek]
• •The popular jscrambler npm package's version 8.14.0 was compromised to include a stealthy Rust infostealer across Windows, macOS, and Linux, exposing developers and users to cross-platform security breaches. This incident underscores the ongoing risks in software supply chains and open-source package ecosystems.[The Hacker News RSS]
• •A critical Zimbra email server vulnerability enables malicious actors to execute harmful code via specially crafted emails, exploiting stored cross-site scripting (XSS). The flaw threatens user sessions globally and necessitates immediate patching to prevent wide-scale exploitation.[The Hacker News]
• •The U.S. cybersecurity agency CISA disclosed operational challenges during a major incident, having to develop its incident response playbook in real-time. This admission illustrates the complexities of managing national cybersecurity crises and the need for established protocols.[TechCrunch]
• •An AI-powered cybersecurity probe identified a longstanding Linux vulnerability valued at $92,000, revealing deep-seated flaws persisting in open-source systems for over 15 years. This finding brings attention to the critical importance of continuous AI-driven security research on foundational software.[The Cryptonomist]
• •Jamie Dimon, CEO of JPMorgan, highlighted the profound cybersecurity risks introduced by artificial intelligence in the financial industry. Bringing this to the forefront underscores the growing need for robust AI risk management strategies in banking sectors vulnerable to emerging threats.[The Cryptonomist]
• •Keysight Technologies released the APS-ONE-400 cybersecurity testing platform on July 10, 2026, to facilitate comprehensive security assessments of cyber products and infrastructures. This launch aims to empower organizations with tools to preemptively identify weaknesses before exploitation.[Engineering.com]
• •Cisco expanded its footprint in cybersecurity by securing a new contract with the U.S. Army and forming a partnership with AP as of July 11, 2026. These strategic developments reinforce Cisco's role as a key provider of defense-related cybersecurity solutions.[simplywall.st]

Relevant articles