Infosec bits for 2026 week 29

Zoya Vilakazi | July 17, 2026, 3:49 p.m.

Cybersecurity News:

AI Is raising South Africa's cybersecurity stakes [Kgomotso Lebele, Engineering News]

CISA warns that multiple vulnerabilities in SharePoint are under exploitation [David Jones, Cybersecurity Dive]

CISA details security lapses that led to GitHub leak of passwords, cloud access keys [Eric Geller, Cybersecurity Dive]

Vulnerabilities & Patches:

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow [Ionut Arghire, Security Week]

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data [Ravie Lakshmanan, The Hacker News]

Critical Notepad++ Bugs Could Lead to Code Execution, Patch Available [Ashish Khaitan, The Cyber Express]

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover [Ravie Lakshmanan, The Hacker News]

F5 Patches Multiple NGINX Vulnerabilities Enabling Heap Buffer Overflow and Code Execution Attacks [Guru Baran, Cyber Security News]

6 GHz Wi-Fi Flaws Could Disrupt Critical Systems [Alexander Culafi, Dark Reading]

Malware & Ransomware:

New ClickLock macOS malware traps users into revealing login password [Bill Toulas, Bleeping Computer]

New Spirals ransomware encrypts victim network in under 24 hours [Bill Toulas, Bleeping Computer]