NewsThe Register — Security07.07.2026

Fake IT bods on Microsoft Teams coax workers into installing malware

Teaser from the source

Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT trojan

This is the RSS-feed teaser. Read the full article at the original source.

Read at The Register — Security

Other advisories

Not ratedosv:CLEANSTART-2026-FW80348pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
Not ratedosv:CLEANSTART-2026-JD93552When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory
HighCVE-2026-95521Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
Not ratedosv:CLEANSTART-2026-PH11243pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
Not ratedosv:CLEANSTART-2026-RT26999pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
MediumCVE-2026-105163Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2
Not ratedosv:CVE-2026-74285net: Stop leased rxq before uninstalling its memory provider
Not ratedosv:GO-2026-5709Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Other news entries

Source: https://www.theregister.com/cyber-crime/2026/07/07/fake-it-bods-on-microsoft-teams-coax-workers-into-installing-malware/5267610

ID