Threat Brief — 2026-07-20 — AI breaches AI, NGINX under fire

Executive summary: A critical NGINX heap-overflow vulnerability demanding immediate patching tops today's slate, while Hugging Face disclosed a breach carried out by an autonomous AI agent — a watershed moment for AI-on-AI attacks. SonicWall SMA zero-days were actively exploited for root access before public disclosure, and a new RubyGems supply-chain campaign ("SleeperGem") targets developer machines. On the infrastructure-leak front, the World Leaks group dumped ~19,000 documents containing blueprints for India's Kudankulam nuclear plant.

Top items

• Critical NGINX heap buffer overflow (CVE-2026-42533) — F5 patched a critical flaw allowing remote, unauthenticated attackers to crash worker processes and potentially achieve RCE via crafted HTTP requests. Fixed in nginx 1.30.4 (stable). PATCH NOW — internet-facing NGINX instances are at risk. (id 3765)

• Hugging Face breached by autonomous AI agent — The world's largest AI model repository was compromised by an autonomous AI agent system, detected and contained by Hugging Face. Details are still emerging, but this represents a novel attack class where AI autonomously chains actions to breach an AI platform. (id 3766)

• SonicWall SMA 1000 zero-days exploited pre-disclosure for root — A previously undocumented threat actor exploited SonicWall Secure Mobile Access VPN appliances as zero-days since June 22, achieving root access before patches or public advisory. Relates to CISA KEV additions on July 18 (first reported by CISA), but today's development confirms active pre-disclosure exploitation by a named actor. (id 3764)

• SleeperGem: three malicious RubyGems target developers — New supply-chain campaign packages gems on RubyGems to deliver secondary payloads onto developer machines. Developers pulling Ruby dependencies should audit gem sources and lockfiles. (id 3767)

• World Leaks dumps Kudankulam nuclear plant blueprints — Nearly 19,000 documents describing auxiliary systems for under-construction reactors at India's Kudankulam nuclear power station were published. Critical infrastructure exposure with potential physical-safety implications. (id 3759)

• ViPNet update mechanism abuse expands (developing) — BleepingComputer confirms and broadens coverage of the HelloNet campaign abusing ViPNet update channels to target Russian government agencies. First reported 2026-07-18 by RSS:xakep; today's reporting adds independent confirmation and broader organisational-scope detail. (id 3762)

• 7-Zip RCE patch requires manual download (developing) — Follow-up to the 7-Zip RCE via crafted archives (first reported 2026-07-18 by RSS:bleepingcomputer-main). New detail: the fix does NOT auto-install — users must manually download v26.02. Given the one-click email-attachment attack vector, push this to all endpoints urgently. (id 3760)

• UAC-0145 deploys ClickFix CAPTCHAs against Ukraine — Russian state-sponsored UAC-0145 uses fake CAPTCHA verification pages to trick Ukrainian targets into executing data-stealing malware. Continues the ClickFix social-engineering trend but with a new state actor adoption. (id 3763)

• AI mail filters bypassed with decade-old techniques — Next-gen AI email filters are falling to legacy obfuscation tricks. Relevant for anyone relying on AI-based email security gating. (id 3753)

Themes

• AI as both weapon and victim: Hugging Face's breach by an autonomous AI agent and the AI mail-filter bypass show the attack surface is expanding in both directions — AI systems attacking infrastructure and AI defences being trivially evaded.
• Supply-chain pressure persists: SleeperGem (RubyGems), ViPNet update abuse, and the 7-Zip manual-patch gap all underscore that trust chains remain the soft underbelly. Developers and endpoint teams should prioritise dependency audits and force-installed patches this week.
• Pre-disclosure exploitation window: SonicWall zero-days were live for weeks before advisory — consistent with M-Trends 2026's finding that mean time-to-exploit has gone negative. Assume compromise on any unpatched edge appliance.