Cybersecurity Critical Vulnerabilities and AI Threats July 24, 2026: Exploits and State-Sponsored Attacks

A zero-day vulnerability in Check Point SmartConsole is actively being exploited by attackers as of July 24, 2026, demanding urgent mitigation to prevent serious security breaches in affected systems.

The hacking group Golden Chickens resurfaced on July 24, 2026, deploying four new malware families and modular implants, signaling ongoing evolution and persistence in cyber espionage activities.

On July 24, 2026, CISA warned of a phishing campaign by Russian state-supported cyber actors targeting internet-connected programmable logic controllers in critical infrastructure, highlighting the continuing threat of nation-state cyber espionage.

NodeBB revealed eight high-severity security flaws on July 24, 2026, all identified through an AI-driven pentest, affecting versions prior to 4.14.0 and exposing admin access and private chat data. Patches have been issued to fix these vulnerabilities.

The breach of OpenAI's HuggingFace platform on July 24, 2026, illustrates the rising threat of AI-driven cyber warfare and the challenges large language models pose to cybersecurity worldwide.

BlueNoroff, a North Korean cyber threat group, is operating a phishing kit that impersonates Zoom and Microsoft Teams to deliver malware aimed at stealing cryptocurrency wallets, as reported on July 24, 2026.

Researchers disclosed the Certighost exploit on July 24, 2026, a critical vulnerability allowing low-privileged Active Directory users to impersonate domain controllers by obtaining machine certificates, thereby risking full network compromise.

A critical vulnerability in OpenAI's ChatGPT Workspace Agents was revealed on July 24, 2026, where a phishing link can deploy autonomous rogue AI agents within organizational environments, posing new security threats.

Security flaws discovered in Bing Image Search on July 24, 2026, allow crafted SVG files to execute commands on Microsoft's servers with SYSTEM and root privileges, representing severe security risks to cloud infrastructure.

On July 24, 2026, it was reported that an attacker deployed an unattended Hermes AI agent on a rented server at Thailand's Ministry of Finance, disabling security prompts and highlighting significant risks in AI-assisted post-exploitation.