M. Thenardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, And More - SWN #599
SC Media, Friday, July 17th, 2026
Security Weekly News covers fake password manager alerts, malicious GitHub repositories, and a critical Oracle EBS flaw.
This Security Weekly News segment, hosted by Doug White and Joshua Marpet, examines multiple active cybersecurity threats and incidents from mid-July 2026.
Coverage includes phishing campaigns targeting LastPass and Bitwarden users through fraudulent security notifications, the discovery of nearly 300 deceptive GitHub repositories distributing malware disguised as legitimate software, and a critical Oracle EBS vulnerability added to CISA's actively exploited list.
Additional topics include ransomware operations executed within 24 hours, AI model poisoning achievable with minimal investment, convictions of Scattered Spider actors for a major London transit attack, Pegasus spyware deployment by Moroccan intelligence, and enterprise migrations away from VMware.