Cyber_Radar_27_July_to_02_August_2026

Weekly Cyber Radar

27th July - 2nd August 2026

Each week, Cyber Radar brings together the latest cyber security, resilience and regulatory developments, with clear insight into what they mean for organisations.

This week's developments show why organisations need faster patching discipline, tighter oversight of trusted suppliers and platforms, and stronger governance around AI-driven attack tools.

Subscribe to receive the weekly highlights and scroll down to explore this week's stories.

Subscribe to Cyber Radar

𝗘𝗱𝘂𝗰𝗮𝘁𝗶𝗼𝗻 𝗗𝗲𝗽𝗮𝗿𝘁𝗺𝗲𝗻𝘁 𝗖𝗼𝗻𝗳𝗶𝗿𝗺𝘀 𝗗𝗮𝘁𝗮 𝗕𝗿𝗲𝗮𝗰𝗵

RightCue - Cyber Radar - Cyber Security Experts
What happened

Social engineering on a support desk exposed 600,000+ records of school and university staff.

Insider Intel

The department has notified the Information Commissioner's Office after confirming the breach.

What to do now

Test whether your service desk staff can be tricked into resetting access without verification.

Read More

𝗥𝘂𝘀𝘀𝗶𝗮𝗻 𝗚𝗿𝗼𝘂𝗽 𝗣𝗶𝘃𝗼𝘁𝘀 𝘁𝗼 𝗡𝗲𝘄 𝗘𝘅𝗽𝗹𝗼𝗶𝘁

RightCue - Cyber Radar - Cyber Security Experts
What happened

State-linked hackers switched from a Zimbra webmail flaw to a new Outlook Web Access exploit.

Insider Intel

The backdoor grants itself mailbox-owner rights, so it survives a full device re-image.

What to do now

Patch Exchange Outlook Web Access promptly and audit mailbox folders for unusual permission changes.

Read More

𝗔𝗱𝘃𝗲𝗿𝘁𝗶𝘀𝗶𝗻𝗴 𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗕𝗿𝗲𝗮𝗰𝗵 𝗛𝗶𝘁𝘀 𝗧𝗵𝗼𝘂𝘀𝗮𝗻𝗱𝘀 𝗼𝗳 𝗦𝗶𝘁𝗲𝘀

Screenshot 2026-08-03 at 16.55.41
What happened

A compromised advertising script quietly swapped crypto wallet addresses on client websites.

Insider Intel

The tainted script evaded every antivirus engine on VirusTotal.

What to do now

Audit third-party scripts on your site and confirm your advertising or analytics vendors have responded.

Read More

𝗨𝗦 𝗪𝗮𝗿𝗻𝘀 𝗼𝗳 𝗪𝗮𝘁𝗲𝗿 𝗦𝘆𝘀𝘁𝗲𝗺 𝗔𝘁𝘁𝗮𝗰𝗸𝘀

RightCue - Cyber Radar - Cyber Security Experts
What happened

Hackers locked out operators at US utilities by hijacking exposed industrial controllers.

Insider Intel

Over 4,000 exposed Rockwell controllers were found reachable from the open internet.

What to do now

Take stock of any internet-facing industrial controllers and remove direct exposure where possible.

Read More

𝗔𝗿𝘁𝗶𝗳𝗶𝗰𝗶𝗮𝗹 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 𝗔𝗴𝗲𝗻𝘁 𝗥𝘂𝗻𝘀 𝗖𝘆𝗯𝗲𝗿𝗮𝘁𝘁𝗮𝗰𝗸𝘀

RightCue - Cyber Radar - Cyber Security Experts
What happened

A hacker let an artificial intelligence model scan, choose and attack targets with barely any human input.

Insider Intel

The AI compressed hours of manual reconnaissance into minutes, researchers confirmed.

What to do now

Start reviewing how your AI governance policy addresses autonomous, agent-driven threats.

Read More

Three priorities for leaders

𝗣𝗮𝘁𝗰𝗵𝗶𝗻𝗴 𝗮𝗹𝗼𝗻𝗲 𝗶𝘀𝗻'𝘁 𝗲𝗻𝗼𝘂𝗴𝗵

Attackers are moving to new exploits within days of a warning, so monitoring and response speed now matter as much as the patch itself.

𝗧𝗿𝘂𝘀𝘁𝗲𝗱 𝗿𝗼𝘂𝘁𝗲𝘀 𝗻𝗲𝗲𝗱 𝘁𝗶𝗴𝗵𝘁𝗲𝗿 𝗼𝘃𝗲𝗿𝘀𝗶𝗴𝗵𝘁

Support desks, suppliers and third-party platforms are now common entry points, so access and verification controls deserve the same scrutiny as core systems.

𝗔𝗜 𝗶𝘀 𝗿𝗮𝗶𝘀𝗶𝗻𝗴 𝘁𝗵𝗲 𝘀𝗽𝗲𝗲𝗱 𝗼𝗳 𝗲𝘀𝗰𝗮𝗹𝗮𝘁𝗶𝗼𝗻

Automated tools can now find and exploit basic weaknesses in minutes, making internet exposure and default credentials more urgent to close.

The Cyber Security Compliance Experts

RightCue has delivered cyber security compliance and assurance since 2009. We are an NCSC Assured Service Provider, CREST accredited, and a Government Commercial Agency supplier.  We work across Defence, Healthcare, Financial Services and Technology, helping organisations meet today’s regulatory requirements and prepare for what comes next.

Stay informed beyond the Cyber Radar briefing

Data (Use and Access) Act 2025

What the Data (Use and Access) Act 2025 means for organisations

The Data (Use and Access) Act 2025, known as the DUAA, has changed the UK's data protection rules. Not dramatically enough to replace UK GDPR, but meaningfully enough that small and medium-sized businesses should take notice.

Read the Guide
Yogesh - Signing Pledge - RightCue Cyner Resilemce Exerts

Cyber resilience starts at the top: RightCue signs the UK Cyber Resilience Pledge

Cyber resilience starts at the top. RightCue is proud to have signed the UK Government's Cyber Resilience Pledge, joining organisations across Britain in making a clear, public commitment to stronger cyber defences.

Read full article
Subscribe to Cyber Radar