- HX Weekly by Hexagon Center
- Posts
- Did someone say “attack!”
Did someone say “attack!”
Surge in cybersecurity threats, with average data breach costs reaching $5 million and FBI warnings about water system hacks targeting drinking supplies in seven states. As threat actors use advanced tactics like AI scammers building trust, malvertising campaigns, and AI agents for espionage, the Hexagon Center emphasizes vigilance and a zero-trust mindset. Readers are encouraged to subscribe to HX Weekly at hexagoncenter.org for updates and protection.
Daniel Masterson, Ai Courtrie Buson & Bard Gee
July 31, 2026
HX Weekly
by Hexagon Center
for the week of July 26, 2026, 132nd edition
Subscribe at hexagoncenter.org
☝️ TWA
Cyber attacks from all the threat actors
Prominent stories this week seem to come from all angles of cyber threats.
🤷♀️ What now?: Stay vigilant. Zero trust.
Tools: Know your enemies. Stay close to Hexagon Center and make sure you’re subscribed to HX Weekly.
Watch our featured PSA for this week below.
📰 Security Highlights
Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
'Wrench' attacks against crypto holders appear to be on the rise
Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis
Microsoft Teams vishing attacks lead to Chaos ransomware attacks
Golden Chickens malware-as-a-service resurfaces with four new families
In other news, AI Agent Drives Espionage Attack on Thai Ministry of Finance
The 132nd edition of HX Weekly outlines a multi-angled surge in cybersecurity threats, highlighted by the average cost of data breaches climbing to $5 million and FBI warnings regarding water system hacks targeting drinking supplies across seven states. As threat actors deploy increasingly sophisticated tactics—including Ai scammers building advanced trust, malvertising campaigns assembling malware directly within browsers, and Ai agents driving espionage attacks—Hexagon Center emphasizes the vital need for absolute vigilance and a zero-trust mindset. Stay informed and protected by subscribing to HX Weekly at hexagoncenter.org.
Watch our selected More You’s digital detox PSA below.
Some of the news shocked us this week. Can you guess which ones? If you are reading this, this means you not only care about cybersecurity but also understand the impact a breach can have on you if you were ever compromised. HX Weekly is your weekly reminder to stay vigilant. Use all the services and resourced that Hexagon Center provides.
Join us. Volunteer with us. We are rolling out more programs. Just as Hexagon Center programs benefits its users and patrons, they also benefit the volunteers. Part of helping our work is also to get people to subscribe to HX Weekly. Forward this email or simply go to hexagoncenter.org to subscribe.
Watch our latest T3 PSA video below.
The 132nd edition of HX Weekly highlights a diverse and escalating array of cyber threats, featuring critical warnings from the FBI regarding water system hacks across seven states and a rise in the average cost of data breaches to $5 million. The newsletter emphasizes absolute vigilance and a zero-trust mindset to combat increasingly sophisticated vectors, such as Ai scammers building trust, malvertising assembling malware directly inside browsers, and Ai-driven espionage. Readers are encouraged to stay informed and protected by utilizing Hexagon Center resources and subscribing at hexagoncenter.org.
HOUSEKEEPING
Glossary/Legend:
Text Salting (or "poisoning") - a technique where threat actors hide random words, invisible characters, or irrelevant code inside an email's HTML or CSS.
Automatic Content Recognition (ACR) - a data-tracking technology built into smart TVs and media devices that captures audio and visual fingerprints of what is on a screen to log viewing habits. In the context of digital privacy and security, ACR is viewed as a persistent privacy risk rather than a defense mechanism.
Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.
MFA - Multi-Factor Authentication is a security process that requires users to provide two or more verification methods to access an account or system.
Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.
Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.
Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.
Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.
Spread cybersecurity culture
Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com
Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.
You may reply to this newsletter or email us at
[email protected]
Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.
Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.
Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.
Content of this newsletter is not an official representation of Hexagon Center.
Reply