July 24, 2026 opens with a threat landscape that feels like a stress test for every layer of the modern enterprise. From North Korean APT groups running sophisticated phishing kits to autonomous AI agents conducting post-exploitation without human oversight, today's critical items share a common thread: adversaries are moving faster, automating more, and targeting the trust relationships that organizations depend on most. Security teams need to treat this briefing as a call to action across identity, SaaS, and perimeter hygiene simultaneously.

The most structurally dangerous item today is Certighost, a publicly available exploit targeting misconfigured Active Directory Certificate Services. The attack allows any low-privileged domain user to obtain a certificate that impersonates a Domain Controller, then use that certificate to perform a DCSync attack and extract the krbtgt hash. Once an attacker holds the krbtgt hash, they can forge Kerberos tickets and move laterally with near-unlimited persistence. This is not a theoretical risk — the exploit is public, the technique is well understood, and the blast radius is total domain compromise. Every organization running AD CS must audit certificate templates immediately, focusing on templates that allow subject name supply or enrollment by low-privileged users. Microsoft's guidance on ESC-class misconfigurations and tools like Certify or PKIAudit should be part of your immediate review cycle.

Running parallel to the AD CS crisis is the BlueNoroff Zoom phishing campaign. This North Korean APT group is operating a phishing kit that impersonates Zoom and Microsoft Teams through typosquatted domains, targeting individuals who hold cryptocurrency wallets. The campaign uses ClickFix-style social engineering, a technique that tricks users into manually executing malicious commands under the guise of fixing a technical problem. What makes this particularly dangerous is the pre-targeting behavior: the kit appears to profile victims before delivering malware, suggesting a deliberate selection process aimed at high-value crypto holders. Organizations in financial services, Web3, and any sector where employees hold or manage digital assets should treat this as an active threat. DNS filtering, browser isolation, and user awareness training focused specifically on ClickFix-style lures are essential countermeasures right now.

On the SaaS and AI front, the ChatGPT AgentForger vulnerability — now patched by OpenAI as of June 8 — serves as a critical reminder that AI platforms introduce novel attack surfaces. The flaw allowed a single phishing link to silently create and authorize rogue AI agents inside a victim's ChatGPT Workspace, potentially giving attackers persistent, automated access to organizational data and workflows. Even though the vulnerability is patched, organizations should audit their ChatGPT Workspace environments for any agents created between the vulnerability's introduction and the patch date, review agent permissions and OAuth authorizations, and establish a baseline policy for what agents are permitted to do and who can authorize them.

The Bing Images vulnerability, where a crafted SVG file achieved SYSTEM-level command execution on Microsoft's production image-processing infrastructure, underscores a systemic risk in how enterprises handle user-supplied file formats. While this specific issue affected Microsoft's own servers, the lesson for defenders is direct: SVG and other rich media formats are code, not just images, and any pipeline that processes them without strict sandboxing is a potential execution vector. Review your own file upload and processing workflows, enforce content-type validation, and ensure image processing occurs in isolated, least-privileged environments.

Perhaps the most forward-looking threat today is the deployment of the Hermes autonomous AI agent against Thailand's Ministry of Finance. A threat actor ran this agent in unattended post-exploitation mode, allowing it to perform privilege escalation, host enumeration, and file system traversal without requiring human approval at each step. This is an early but concrete example of AI-accelerated intrusion operations. Traditional detection timelines built around human attacker pacing may no longer be adequate. Behavioral detection rules need to account for rapid, systematic enumeration patterns that may look automated rather than manual.

Finally, Clop ransomware is actively targeting internet-exposed instances of PTC Windchill and FlexPLM, platforms used in product lifecycle and manufacturing environments. Clop's focus on data exfiltration for extortion means that even organizations with strong backup postures are at risk of sensitive intellectual property being weaponized. Any organization running these platforms must assess their internet exposure immediately.

Defensive priorities for today:

- Audit AD CS certificate templates for ESC-class misconfigurations and restrict enrollment rights to privileged accounts only
- Enable DNS filtering and deploy browser isolation for users in crypto-adjacent or financial roles to counter BlueNoroff phishing
- Review ChatGPT Workspace agent inventories and enforce least-privilege authorization policies for all AI agents
- Restrict SVG and rich media processing to sandboxed, least-privileged pipelines across all internal and customer-facing applications
- Update behavioral detection rules to flag rapid automated enumeration patterns consistent with AI-assisted post-exploitation
- Immediately remove PTC Windchill and FlexPLM instances from direct internet exposure and apply all available vendor patches
- Validate krbtgt hash rotation procedures and ensure DCSync activity is alerted on in your SIEM

This briefing is informational and does not replace official vendor advisories or guidance from your organization's security operations team.