- HX Weekly by Hexagon Center
- Posts
- Near ... Far ... Wherever You Are
Near ... Far ... Wherever You Are
You might be wondering what inspired our headline this week. It’s in there. The 130th edition of HX Weekly highlights the pervasive nature of phishing threats, which now range from malicious eCards to sophisticated social media scams using fake ticket websites and deceptive security alerts. To combat this volatile environment, the Hexagon Center urges the public to adopt a "zero trust" mindset, emphasizing that even seemingly harmless digital interactions can be dangerous traps. As infrastructure vulnerabilities and Ai-driven risks continue to escalate, the Center is expanding its HexagonPSA educational campaign, releasing engaging, shareable content across social media and YouTube to help the public stay vigilant and informed.
HX Weekly
by Hexagon Center
for the week of July 12, 2026, 130th edition
Subscribe at hexagoncenter.org
☝️ TWA
The phish is everywhere
There are all sorts of phish out there.
🤷♀️ What now?: Always be vigilant. Always practice zero trust.
Tools: Subscribe to HX Weekly. Together with Hexagon Center, we’ll keep you protected.
📰 Security Highlights
Datacentres drive up big tech’s carbon emissions to a third of those of France
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
Officials once again warn defenders that Russian hackers are targeting network devices
Lidl discloses online shop breach after service provider hack
LastPass, Bitwarden users targeted with fake security alerts
Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones
This week’s cybersecurity news highlight a volatile landscape defined by critical infrastructure threats and the rapid evolution of Ai-driven risks. Security teams have been overwhelmed by a "Patchapalooza" of vulnerabilities in major platforms like Windows, SharePoint, Fortinet, and Cisco, many of which are already under active exploitation. International tensions remain high, with global alliances responding to state-sponsored Russian cyber activity and espionage campaigns targeting military and utility networks. Furthermore, experts are increasingly focused on the intersection of fraud and technology, discussing how agentic Ai creates new insider threats, the rise of "fraud-as-a-service," and the complexities of securing emerging Ai technologies alongside legacy enterprise systems.
It appears that the warnings we issued last week have made it into this week’s news. At the very least, take a few minutes to read our newsletter, particularly the TWA (Tips, Warnings, Alerts) section.
We are now expanding our PSA campaign to include even more social media platforms. A video will be released every 5 hours on these platforms. We are still releasing new ones every 7 hours on YouTube. Please check them out and let us know your thoughts and suggestions on how we can make these messages more fun, engaging and shareable.
The 130th edition of HX Weekly highlights the pervasive nature of phishing threats, which now range from malicious eCards to sophisticated social media scams using fake ticket websites and deceptive security alerts. To combat this volatile environment, the Hexagon Center urges the public to adopt a "zero trust" mindset, emphasizing that even seemingly harmless digital interactions can be dangerous traps. As infrastructure vulnerabilities and Ai-driven risks continue to escalate, the Center is expanding its HexagonPSA educational campaign, releasing engaging, shareable content across social media and YouTube to help the public stay vigilant and informed.

HOUSEKEEPING
Glossary/Legend:
Zero Trust - a strategic cybersecurity framework based on the principle of "never trust, always verify," requiring strict identity authentication and authorization for every user and device, whether inside or outside the network perimeter. It assumes breach, removes implicit trust, and employs granular, least-privilege access controls to protect resources.
Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.
MFA - Multi-Factor Authentication is a security process that requires users to provide two or more verification methods to access an account or system.
Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.
Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.
Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.
Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.
Spread cybersecurity culture
Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com
Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.
You may reply to this newsletter or email us at
[email protected]
Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.
Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.
Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.
Content of this newsletter is not an official representation of Hexagon Center.




Reply