You don’t think it matters until it does

This week, we highlight a volatile cyber threat landscape driven by advanced AI-powered attacks and cloud vulnerabilities. Microsoft warns of ACR Stealer surges, and reports of rogue AI models emerge. To counter evolving tactics like AI-assisted phishing, HollowGraph malware abusing Microsoft 365, and hidden physical vulnerabilities in vehicles, the Hexagon Center urges individuals to stop sharing personal and biometric data. Old defenses can’t protect against modern threats, so readers are encouraged to remain vigilant, abandon casual data-sharing habits, and subscribe to the Hexagon Center for ongoing digital protection and updates.

AuthorAuthorAuthor

Daniel Masterson, Ai Courtrie Buson & Bard Gee
July 24, 2026

HX Weekly
by Hexagon Center

for the week of July 19, 2026, 131st edition

Subscribe at hexagoncenter.org

☝️ TWA

Protect your data. Don’t get caught off guard.

🤷‍♀️ What now?: Don’t think what you’re sharing is innocuous. A threat actor can turn a “unless” data into something working for them.

Tools: Refrain from sharing your personal information or biometric data indiscriminately.

The 131st edition of HX Weekly highlights a volatile cyber threat landscape driven by advanced Ai-powered attacks and cloud vulnerabilities, including Microsoft warnings of ACR Stealer surges and reports of Ai models going rogue. To counter evolving tactics like Ai-assisted phishing, HollowGraph malware abusing Microsoft 365, and hidden physical vulnerabilities in vehicles, the Hexagon Center urges individuals to stop sharing personal and biometric data frivolously. Because old defenses can no longer protect against modern threats, readers are encouraged to remain vigilant, abandon casual data-sharing habits, and subscribe to the Hexagon Center for ongoing digital protection and updates.

about this edition and Inside Hexagon

We understand that this week’s news might be a bit too technical for many of our readers, but the simplified summary directly above provides a more comprehensive overview.

The reality is that many people are careless about their personal information and biometric data. You might think it’s harmless until it’s used against you. Always protect anything that belongs to you, including your personal data.

Hexagon Center’s PSA, T3, is now only available in the wide version. However, you might still catch a glimpse of it in the tall, mobile version of the PSA. HexagonPSA has been an incredibly exciting addition to our team, and we eagerly anticipate many more adventures in the future.

The 131st edition of HX Weekly highlights a rapidly evolving threat landscape defined by advanced Ai-driven attacks, cloud vulnerabilities, and data exposure. Addressing concerns such as Microsoft's warnings on ACR Stealer surges and reports of rogue Ai models, the Hexagon Center emphasizes that old defenses are no longer sufficient against modern threats. Readers are urged to break casual data-sharing habits and protect their personal and biometric information from being weaponized. Additionally, the Hexagon Center provides updates on its ongoing public service announcements and invites readers to stay protected by subscribing at hexagoncenter.org.

- HX Weekly Team
HOUSEKEEPING

Glossary/Legend:

  • Text Salting (or "poisoning") - a technique where threat actors hide random words, invisible characters, or irrelevant code inside an email's HTML or CSS.

  • Automatic Content Recognition (ACR) - a data-tracking technology built into smart TVs and media devices that captures audio and visual fingerprints of what is on a screen to log viewing habits. In the context of digital privacy and security, ACR is viewed as a persistent privacy risk rather than a defense mechanism.

  • Holistic security - a comprehensive strategy that integrates various protection layers—physical, digital, psycho-social, and organizational—to safeguard individuals, communities, or systems, recognizing that true security involves overall well-being, not just isolated technical defenses.

  • MFA - Multi-Factor Authentication is a security process that requires users to provide two or more verification methods to access an account or system.

  1. Personal Identifier - A unique word or phrase shared exclusively with an individual or a group, serving as a means of identification and affirmation within the established relationship. It is recommended that 2 or more Personal Identifiers be established per person.

  2. Malware (short for malicious software) - refers to any intrusive software developed by cybercriminals (often called hackers) to steal data and damage or destroy computers and computer systems.

  3. Ransomware - A type of malware that locks or encrypts a victim's files and demands a ransom payment to unlock and decrypt them. Ransomware can infect a variety of devices, including computers, smartphones, printers, and more.

Privacy Notice: HX Weekly and the Hexagon Center are committed to your digital security. We do not collect, track, or store any personal information from our subscribers beyond the email address provided for delivery.

Spread cybersecurity culture

Do you have any suggestions on how we can further share this newsletter? Tell your friends and family about us by sharing with them the Hexagon Center official website:
View archives at hxweekly.beehiiv.com

Even though we aim to provide you the most current and critical information to keep you safe, threat actors work 24/7 and this newsletter publishes only once a week. Even though we are available via a hotline, it is crucial that you stay up to date via other sources as well to be informed on how you may be at risk.

You may reply to this newsletter or email us at
[email protected]

Send us any questions or things you want to talk about. Please share some fun facts with us. We welcome feedback and suggestions.

Hexagon Center is formed as a nonprofit corporation in California for public benefit,
and is tax-exempt under section 501(c)(3) of the Internal Revenue Code.

Cybersecurity is an ever-changing field, and threats may evolve. While Hexagon Center strives to provide accurate and timely information, we cannot guarantee absolute security. Users are responsible for implementing their security measures and staying informed about the latest cybersecurity developments. Hexagon Center is not responsible for any cyber or scam attacks by our readers. HX Weekly tips are advice are not official positions of Hexagon Center nor is Hexagon Center responsible for its content.

Content of this newsletter is not an official representation of Hexagon Center.

Reply

or to participate.