Security Digest - July 22, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-07-22 15:26:22 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• Critical Palo Alto VPN bug now exploited by Qilin ransomware gang - (BleepingComputer) System.Xml.XmlElement

  Action: Review VPN client version and deployment.

🛡 Security Ops

• Kerberoasting is still the one that surprises the most, despite looking into security events for years - (Reddit r/cybersecurity) Review sensor guidance and deployment posture.

• Need Career Advice: Feeling Stuck as an L1 Cybersecurity Analyst - (Reddit r/cybersecurity) Review sensor guidance and deployment posture.

🛠 Infrastructure & Endpoint Control

• Adobe Chrome extension flaw let sites access private WhatsApp chats - (BleepingComputer) Confirm Adobe exposure; push updated deployment. Validate Chrome coverage; update managed package if needed.

• Firefox finally gets highly requested Windows 11 feature Chrome, Edge has had for many years - (Neowin) Validate Chrome coverage; update managed package if needed. Validate Edge/WebView2 coverage; refresh managed package. Validate workstation security baseline and update compliance.

• Five questions board should ask - (Reddit r/cybersecurity) Review security controls and policy updates.

• Hands-on: Windows 11’s redesigned Widgets panel is finally bearable - (Neowin) Validate workstation security baseline and update compliance.

• Latest Windows 11 26H1 Experimental build adds braille display support, more languages - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft found yet another place to put Copilot inside Windows 11 - (Neowin) Validate workstation security baseline and update compliance.

• Windows 11 is quietly testing a modern, dark Properties dialog (finally) - (Neowin) Validate workstation security baseline and update compliance.

🔍 Quick Links (Watch Items)

• At what point does a cybersecurity role become professionally unsustainable? - (Reddit r/cybersecurity)
• Critical Meta Vulnerability Exposed Customer Support Emails, Chats, and Uploaded Files - (CybersecurityNews)
• Kerberoasting is still the one that surprises the most, despite looking into security events for years - (Reddit r/cybersecurity)
• New InfraTrust report reveals infrastructure flaws admins should patch first - (BleepingComputer)
• What would an AI or AI Agent hack look like? - (Reddit r/cybersecurity)
• Deployed Wazuh SIEM/XDR in virtual lab - (Reddit r/cybersecurity)
• CISA Warns of WordPress Core SQL Injection Vulnerability Actively Exploited in the Wild - (CybersecurityNews)
• Microsoft to stop Exchange 2016 / 2019 security updates in October - (BleepingComputer)
• I dont know how to start with over the wire wargames - (Reddit r/cybersecurity)
• Cisco launches super affordable security language model called Antares - (Neowin)