This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft--662 bugs--and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced.

Links

Cursor bug: https://decipher.sc/2026/07/15/bug-in...

First VPN sanctions: https://decipher.sc/2026/07/13/us-san...