A wave of critical security vulnerabilities were disclosed and patched in July 2026: Node.js fixed 11 flaws (server crashes, filesystem bypass), GitLab 13 flaws (data leaks, pipeline tampering), Home Assistant FFmpeg plugin (file theft, root execution), and Cisco Secure Firewall (0-day actively exploited). A Brinks Home data breach was also claimed by ShinyHunters group.
The US Senate panel advanced Trump's Labor Department and CDC nominees on July 30, while Attorney General nominee Blanche's confirmation remained uncertain; Trump threatened to withdraw Blanche's nomination pending GOP holdout departures. Multiple cabinet positions are in active review.