Infosec bits for 2026 week 27

Anele Siwela | July 3, 2026, 3:05 p.m.

Cybersecurity News:

South Africa's cybersecurity challenge is now a talent challenge [Boland Lithebe, Engineering News]

New Claude Code Attack Allows Attackers to Take Full Control of Developers’ Systems [Guru Baran, Cybersecurity News]

Most cybersecurity workers have been told to conceal a breach, report finds [Eric Geller, Cybersecurity Dive]

OTCC expands coalition with OSC Global, brings OT integration expertise to boost critical infrastructure cybersecurity [Industrial Cyber News Desk, Industrial Cyber News Desk]

Mastercard opens Africa Cybersecurity Centre of Excellence [Schalk Burger, Engineering News]

Hottest cybersecurity open-source tools of the month: June 2026 [Anamarija Pogorelec, Helpnet Security]

Vulnerabilities and Patches:

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic [Ravie Lakshmanan, the hacker news]

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari [Ionut Arghire, Security week]

AI may be good at finding security vulnerabilities, but it can't beat human stupidity [Brandon Vigliarolo, The Register]

CISA adds SharePoint flaw to known exploited vulnerabilities list [Steve Zurier, Scworld]

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation [Ravie Lakshmanan, The Hacker News]

Cyberattacks and Breaches:

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks [Ravie Lakshmanan, the hacker news]

UAE Cyber Security Council thwarts sophisticated cyberattacks targeting financial sector [emirates247, emirates247]

Data of 70,000 people compromised in cybersecurity incident involving SLA’s vendor IBM [Rachel Lim, Channel Newsasia]