June 2026
172 posts. Browse all months
- Micron CEO: Customers driving hard bargain on price contributed to memory shortage
Micron CEO Sanjay Mehrotra attributes the current memory chip shortage to years of aggressive pricing demands from customers that left the industry …
- London Hydro providing credit monitor in wake of data breach | London Free Press
Following a data breach that exposed personal customer information, London Hydro is providing affected individuals with free credit monitoring services through …
- Texas Parks Data Breach Exposes Information of 3M+ Customers
A cybersecurity incident involving a third-party vendor for the Texas Parks and Wildlife Department has potentially exposed the personal information of over 3 …
- New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs
The EvilTokens attack utilizes encrypted payloads that remain hidden until browser execution, exposing a visibility gap that complicates threat detection for …
- China’s Meituan open-sources massive LongCat-2.0 AI model, saying it was trained on domestic chips - SiliconANGLE
Meituan has released LongCat-2.0, a massive 1.6-trillion-parameter open-source AI model designed for agentic workflows and advanced reasoning. The company …
- Nissan employee data exposed in Oracle PeopleSoft zero-day attacks | IT Pro
Nissan employee personal and financial data was exposed following a zero-day vulnerability exploit within the Oracle PeopleSoft software. The company has since …
- Nissan employee data exposed in Oracle PeopleSoft zero-day attacks | IT Pro
Nissan employee personal and financial data was exposed following a zero-day vulnerability exploit within the Oracle PeopleSoft software. The company has since …
- Anthropic’s Claude Code Reportedly Uses Hidden Code to Detect Chinese Users
The Claude Code CLI tool allegedly contains undisclosed detection logic that uses steganography to identify and flag Chinese users to Anthropic’s servers. This …
- Microsoft adds smarter bot protection to Teams meetings
Microsoft has introduced a new Teams admin policy that allows organizers to detect and restrict third-party bots by requiring manual approval before they can …
- WhatsApp Usernames Will Let You Chat Without Sharing Your Phone Number
WhatsApp is introducing usernames to allow users to connect without revealing their phone numbers, enhancing privacy for new conversations. Users can now …
- SystemBC Malware Turns Windows Machines Into SOCKS5 Proxies for Ransomware Attacks
SystemBC is a versatile Windows malware that transforms compromised hosts into SOCKS5 proxies to facilitate ransomware attacks and maintain stealthy remote …
- Insurance giant Aflac discloses data breach after subsidiary hack
Aflac has disclosed a data breach at its Japan subsidiary involving the theft of personal and bank account information. The incident was limited to Aflac …
- PoC Released for NTLM reflection bypass Vulnerability that Emanbles SYSTEM Access on Windows Server
A newly released PoC exploits the CVE-2025-33073 vulnerability, allowing attackers to bypass NTLM reflection mitigations and gain SYSTEM access on Windows …
- Apple Fixes WebKit Flaws in iOS and macOS, With Help From AI Tools - Security Affairs
Apple released emergency security updates for iOS, macOS, and Safari to patch dozens of vulnerabilities, including four WebKit flaws identified using AI tools. …
- Malicious Chromium extension spoofs Perplexity AI to hijack browser searches | CSO Online
A malicious Chromium extension recently spoofed Perplexity AI to intercept and route user search traffic through attacker-controlled servers. Google has since …
- Russian group hacked Quebec water treatment plant, gained access to control pumps and chlorine dosing: CSE - Yahoo News Canada
The Communications Security Establishment reported that the Russian hacktivist group NoName breached a Quebec water treatment plant, gaining the ability to …
- Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users' Location History - SecurityWeek
The Supreme Court ruled that constitutional privacy protections extend to cellphone location history, determining that users do not forfeit their privacy …
- Multiple AirDrop and Quick Share Vulnerabilities Allow Attackers to Crash Devices
A technical analysis identified six proximity-transfer vulnerabilities across Apple AirDrop, Samsung Quick Share, and Google Quick Share that allow nearby …
- SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) - Help Net Security
Attackers are exploiting the CVE-2026-48558 authentication bypass vulnerability in SimpleHelp RMM to deploy Djinn Stealer, a sophisticated malware targeting …
- Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817
Attackers are actively exploiting CVE-2026-46817, a critical vulnerability in Oracle E-Business Suite that allows unauthenticated remote takeover of Oracle …
- Austria Urges Anthropic to Move to EU to Avoid US Controls
The Austrian government is urging Anthropic to relocate its operations to the European Union to circumvent restrictive U.S. export controls on its advanced AI …
- Austria Urges Anthropic to Move to EU to Avoid US Controls
The Austrian government is urging Anthropic to relocate its operations to the European Union to circumvent restrictive U.S. export controls on its advanced AI …
- DHS Eyes 600 New Cybersecurity Hires, New Director for CISA
Homeland Security Secretary Markwayne Mullin is aiming to revitalize the Cybersecurity and Infrastructure Security Agency by hiring 600 skilled professionals …
- China’s New Zhipu AI Reportedly Matches Claude Mythos in Vulnerability Detection
China’s Zhipu AI has released the open-weight model GLM-5.2, which matches Anthropic’s restricted Claude Mythos in specific software vulnerability detection …
- Device Code Phishing Campaigns See 37x Spike via Advanced Criminal Kits
www.bleepingcomputer.com/news/secu… Summary: Global threat researchers have documented a staggering 37-fold increase in sophisticated device code authentication …
- OpenAI Unveils GPT-5.6 Sol Advanced Autonomous Cyber Security AI Engine
www.securityweek.com/openai-un… Summary: OpenAI has officially introduced GPT-5.6 Sol, an advanced neural model architecture trained specifically for real-time …
- Shopify Shop App Abuse Operations Flood Users with Fake Purchase Receipts
www.bleepingcomputer.com/news/secu… Summary: E-commerce security monitors have detected an active exploitation campaign targeting the Shopify Shop application …
- Threat Intel 2026-06-29
1. FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys Original URL: …
- NZ pharmacy scrambles to scrub internet of patients' private messages - DataBreaches.Net
Unichem Petone has removed sensitive patient messages from the internet after a website system error exposed the private information of 29 individuals. The …
- Apple working with supplier Tata after sensitive files leak online - 9to5Mac
Apple and its supplier Tata Electronics are conducting a joint investigation after a cyberattack resulted in the theft and publication of over 200,000 …
- NAIC suspends investment risk designations after cyber attack - DataBreaches.Net
The National Association of Insurance Commissioners (NAIC) has suspended its investment risk designations following a significant cyber attack by ShinyHunters …
- Mercor AI Data Breach: 4TB of Contractor Biometrics, SSNs Leaked | All About Cookies
AI hiring platform Mercor experienced a data breach in March 2026, exposing sensitive user data including passport scans, Social Security numbers, and …
- License plate cameras can Id iPhone and Apple Watches
Leonardo US Cyber and Security Solutions has developed SignalTrace, a technology that integrates Bluetooth, Wi-Fi, and RFID trackers into license plate readers …
- Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware
The Chinese APT CL-STA-1062 is actively targeting Southeast Asian government and critical energy infrastructure using a combination of open-source tools and …
- New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets
The DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned …
- GitHub - femboyisp/purroute: purrformant advance proxy server that supports protocol detection (socks5, socks4, http, https, etc on the same port) and protocol translation (http -> socks5, socks5 -> http, etc), supports proxy chains, lists, and more advance settings. · GitHub
purroute is an auto-detecting proxy router written in Rust that supports protocol translation, multi-hop chaining, and tag-based exit selection. It enables …
- Cybersecurity firms targeted by fraudulent OpenAI organization invites
In the Poisoned Tenant campaign, threat actors are sending fraudulent OpenAI invitations that impersonate legitimate organizations to trick employees into …
- Polymarket customers lose $3 million in supply-chain attack
Polymarket is a cryptocurrency prediction market that will fully reimburse customers after a supply-chain attack involving a malicious script injection caused …
- New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
The StrikeShark campaign utilizes a new malware called SharkLoader to deploy Cobalt Strike beacons across diverse global organizations by exploiting various …
- New ‘Blacksite’ phishing kit bundles AiTM with scanner evasion | news | SC Media
The new Blacksite phishing kit utilizes AiTM attacks to bypass multi-factor authentication while integrating the Cloaked.gg evasion tool to hide malicious …
- OpenAI Reportedly Delays ChatGPT 5.6 Release Following Trump Administration Request
OpenAI has delayed the public launch of GPT-5.6 to implement a staggered, government-approved rollout following concerns from the Trump administration …
- Europe Evolves Into Ransomware’s Favorite Region
Source URL: www.darkreading.com/cybersecu… Dark Reading reports that ransomware activity against European organizations has increased materially after a global …
- Malicious Edge extension abuses Native Messaging as bridge to malware
Source URL: www.bleepingcomputer.com/news/secu… BleepingComputer reports that a malicious Microsoft Edge extension called Edgecution has been used in a …
- DraftKings hacker “Snoopy” sentenced to 18 months in prison
Source URL: www.bleepingcomputer.com/news/secu… BleepingComputer reports that Nathan Austad, a 21-year-old Minnesota man using the alias “Snoopy,” was sentenced …
- New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
Source URL: thehackernews.com/2026/06/n… The Hacker News reports that a new stealthy backdoor called Mistic, also tracked as MLTBackdoor, has been used in …
- New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
Source URL: thehackernews.com/2026/06/n… The Hacker News reports on Gaslight, a newly documented Rust-based macOS implant and information stealer assessed with …
- AI coding agents could soon cost more than the developers using them
Source URL: www.theregister.com/ai-and-ml… The Register reports Gartner’s warning that AI coding-agent economics are becoming difficult for software engineering …
- OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat
Source URL: unit42.paloaltonetworks.com/openclaw-… Unit 42’s research examines supply-chain risk in OpenClaw’s ClawHub skill marketplace, where third-party …
- StrikeShark: Investigating a new campaign delivering Cobalt Strike through SharkLoader
Source URL: securelist.com/strikesha… Kaspersky’s Securelist research describes StrikeShark, a broader campaign involving a newly documented malware family …
- Zero-Day Exploitation of Vulnerability CVE-2026-20245 in Cisco Catalyst SD-WAN Manager
Source URL: cloud.google.com/blog/topi… Mandiant reported that a threat actor targeting SD-WAN infrastructure at a service provider used a compromised …
- StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
Source URL: www.microsoft.com/en-us/sec… Microsoft’s analysis describes how infostealers such as StealC and malware loaders such as Amadey function as …
- CISA warns of max-severity Ubiquiti flaws exploited in attacks
Source URL: www.bleepingcomputer.com/news/secu… CISA added actively exploited vulnerabilities affecting Ubiquiti UniFi OS and Lantronix EDS5000 …
- Morning cyber summary
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks Source URL: …
- Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
A new executive order signed by President Trump mandates that federal agencies and covered contractors transition their high-value systems to post-quantum …
- Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
Security firm AIR demonstrated that a fake AI agent skill can bypass security scanners and reach 26,000 agents by utilizing external links that remain unvetted …
- Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire | Malwarebytes
The dark web hosts a professionalized criminal ecosystem where hackers trade stolen identities, operate malware-as-a-service, and conduct sophisticated …
- AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration
AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration explains that unrestricted outbound traffic allows attackers to exfiltrate data from …
- Feds seize alleged cyber-scam infrastructure connected to Southeast Asian company | The Record from Recorded Future News
The U.S. government seized a cloud computing account used by the Huione Group, a Cambodian conglomerate accused of facilitating money laundering, human …
- LastPass Confirms Customer Data Breach After Klue OAuth Token Theft
LastPass confirmed that an extortion group named Icarus accessed customer relationship management data in its Salesforce environment by using stolen Klue OAuth …
- Five Eyes agencies sound alarm about AI’s threat to cybersecurity | The Record from Recorded Future News
The Five Eyes intelligence collaborative has issued an urgent warning that rapidly evolving AI significantly accelerates cybersecurity threats by lowering …
- Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data - SecurityWeek
A decades-old memory leak vulnerability in Squid Proxy, dubbed Squidbleed (CVE-2026-47729), allows attackers to capture sensitive cleartext HTTP data from …
- ShinyHunters threatens to leak One Medical Seniors patient data | TechTarget
The cyber extortion group ShinyHunters has claimed responsibility for a data breach involving One Medical Seniors patient files stored on a legacy third-party …
- Tata hack claims to leak Apple, Tesla data: report | The Daily Star
Tata Electronics hack claims to leak Apple, Tesla data: report details a ransomware attack on Tata Electronics that exposed confidential manufacturing …
- Security shops among the ‘hundreds’ of Klue hack victims
The Icarus extortion group has compromised Klue, leading to a supply-chain attack that allowed the unauthorized access of sensitive Salesforce CRM data …
- AryStinger Botnet Uses Intranet Scanning and Traffic Tunneling to Hide Attacker Activity
The AryStinger botnet exploits vulnerabilities in legacy routers and NAS appliances to conduct intranet scanning and traffic tunneling for stealthy cyber …
- Attackers Can Poison AI Research Agents Using Reddit and Wikipedia Content
Attackers can poison AI research agents by inserting malicious snippets into user-generated content platforms like Reddit and Wikipedia, which these systems …
- LACUNA Chain Ghost Frames Technique Bypasses EDR Call-Stack Detection
The LACUNA Chain technique bypasses modern EDR call-stack detection by leveraging ghost frames and unwind metadata gaps to create plausible, trusted call …
- Salesforce Disables Klue Integration After OAuth Token Theft Hits Customer Data
Salesforce disabled its Klue Battlecards integration after the Icarus extortion group exploited an old credential to steal OAuth tokens and access sensitive …
- Multi-Stage Steganographic Loader Deploys Remcos RAT and Multiple Infostealers Globally
A sophisticated multi-stage steganographic loader uses in-memory .NET execution to distribute the Remcos RAT and various infostealers through a global phishing …
- New Malware Attack Via WhatsApp Attacking Windows System to Enable Remote Access For Attackers
A malware campaign spreading via WhatsApp targets Windows users by distributing malicious VBScript files disguised as financial documents to enable remote …
- Gentlemen RaaS Unifies HexKiller, ThrottleBlood, and HavocKiller in New Evasion Suite
The Gentlemen RaaS operation has integrated HexKiller, ThrottleBlood, and HavocKiller into a unified EDR evasion suite to neutralize security solutions …
- MDR Provider Comparison: Time to Discover and Respond to Threats
MDR Provider Comparison: Time to Discover and Respond to Threats evaluates how leading MDR providers optimize Mean Time to Respond (MTTR) to minimize the …
- France and Germany Boost Digital Sovereignty Push
France and Germany are strengthening digital sovereignty by establishing a common framework and launching a 13 billion euro investment fund to support European …
- Microsoft links Mastra AI supply chain attack to North Korean hackers
Microsoft has attributed the Mastra AI supply chain attack, which compromised over 140 npm packages, to the North Korean threat actor Sapphire Sleet. The …
- New Prinz Eugen ransomware prioritizes recent files for encryption
The Prinz Eugen ransomware prioritizes the encryption of recently modified files to maximize operational impact and business disruption. This Go-based malware …
- Inside GentleKiller: The EDR-Killer Powering The Gentlemen
The Gentlemen ransomware group provides its affiliates with a centralized, standardized EDR-killer suite called GentleKiller to disable security tools via …
- CyberSentinel AI with 33 Security Tools, Including Nmap, SQLMap, ZAP, and uses Claude, GPT
CyberSentinel AI v3.0 is an open-source, autonomous cybersecurity platform that integrates 33 penetration testing tools within an isolated Kali Linux Docker …
- GitHub - kaifcodec/user-scanner: 🕵️♂️ (2-in-1) Email & Username OSINT suite for deep data extraction. Analyzes 285+ scan vectors (100+ email / 185+ username) for security research, investigations, and digital footprinting. · GitHub
User Scanner is a powerful 2-in-1 OSINT suite designed for deep email and username intelligence across over 285 platforms. It enables users to map digital …
- TD tells some employees it will use software to monitor their work in an effort to increase productivity - The Globe and Mail
TD Bank informed some employees in its financial crimes and risk management team that it will use software to monitor their work. The software, provided by …
- Canadian dollar hits 14-month low as core retail sales decline | Reuters
The Canadian dollar weakened to a 14-month low against the US dollar, influenced by declining oil prices and subdued retail sales data. The loonie traded at …
- Maine breach portal abused to publish fake data breach disclosures
Maine breach portal abused to publish fake data breach disclosures is a report detailing how scammers are exploiting the Maine Attorney General’s breach portal …
- Judge allows Canadian spy agency to disinfect Canadian devices
The Canadian Security Intelligence Service has obtained a court warrant to proactively remove malware from infected Canadian devices associated with an unnamed …
- Texas government data breach allowed hackers to steal 3 million driver’s licenses and passports | TechCrunch
A data breach at the Texas Parks & Wildlife department has exposed the driver’s license and passport information of over 3 million individuals. Hackers gained …
- 24 Billion Stolen Credentials Exposed in Massive Data Leak - Security Affairs
A massive data leak involving 24 billion stolen credentials was recently discovered in an exposed Elasticsearch cluster, posing a significant risk of account …
- These Popular Snacks Contain High Levels of Additives - Consumer Reports
An investigation by Consumer Reports and Yuka found that over a third of tested popular processed snacks contain additives or contaminants at levels exceeding …
- AMD silently removes memory encryption from consumer Ryzen CPUs, leaving users unaware that they may be vulnerable — security feature vanishes after newer AGESA firmware, AMD engineers go radio silent when pressed about the change | Tom’s Hardware
AMD has quietly removed Transparent Secure Memory Encryption (TSME) from consumer Ryzen CPUs via a recent AGESA firmware update, leaving users vulnerable to …
- UAE sets minimum social media age at 15, mandates age checks | Reuters
The UAE has set a minimum age of 15 for social media use and mandated age checks.
- Apple’s A12 and A13 Chips Facing New Unpatchable Exploit - MacRumors
Apple’s A12 and A13 chips are affected by a new, unpatchable BootROM exploit called usbliter8 that leverages a hardware bug in the USB controller. Because this …
- Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world | TechCrunch
A widespread cybercrime campaign dubbed FortiBleed has compromised tens of thousands of Fortinet firewalls and VPNs globally by exploiting known passwords …
- Peter Thiel’s Secret Club Exposed After Records Leak | Times Now
Peter Thiel’s Secret Club Exposed After Records Leak reports that a massive data breach revealed the membership and private agendas of Dialog, an exclusive, …
- Authorities investigating cyberattack on Singapore-based Global Schools Foundation - CNA
Singaporean authorities are investigating a cyberattack on the Global Schools Foundation after the hacking group FulcrumSec allegedly stole 4.8TB of sensitive …
- New Data: Three Outages and Customers Will Look Elsewhere
New Data: Three Outages and Customers Will Look Elsewhere reveals that 60% of consumers will switch providers after three service outages due to eroding …
- Government of Canada Strengthens Cyber Security and Critical Infrastructure with Royal Assent of Bill C‑8 - Canada.ca
The Government of Canada has strengthened cyber security and critical infrastructure through the Royal Assent of Bill C-8, which amends the Telecommunications …
- ShinyHunters claims Kodak hack | Cybernews
The ShinyHunters ransomware group claims to have stolen over 2.2 million Eastman Kodak records and has threatened to leak the data if the company does not …
- 5.4 million Swedes listed in alleged data breach | Cybernews
A data breach involving 5.4 million Swedes has been claimed by hackers, though experts suggest the information may simply be compiled from publicly available …
- Cybercrime Group Claims Novo Nordisk Hack - SecurityWeek
The hack-and-leak group FulcrumSec has claimed responsibility for a cyberattack on pharmaceutical company Novo Nordisk, alleging they stole 1.3 terabytes of …
- Did hackers access ICAI’s exam portal? Alleged data breach sparks concern days before CA Inter, Final results 2026 - The Times of India
Unverified online claims of a data breach involving the ICAI exam portal and member database have sparked concern among students and professionals just days …
- CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation
Cisco has confirmed that CVE-2026-20262, an arbitrary file write vulnerability in Cisco Catalyst SD-WAN Manager, is currently under active exploitation. CISA …
- Infinite Campus Breach Leaks Personal Information of 137,000 Users
The Infinite Campus breach attributed to the ShinyHunters threat group exposed the personally identifiable information of 137,000 users, primarily consisting …
- Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
A recent industry study reveals that anonymized infrastructure, such as VPNs and residential proxies, is involved in 94% of security incidents. Despite this …
- Russian and Chinese Influence Actors Use AI to Evade Bot Detection and Mimic Human Behavior
Russian and Chinese influence actors are utilizing artificial intelligence to mimic human behavior and evade bot detection by reducing post volume and adopting …
- Chinese Hacking Firm Upgrades With New Windows Backdoor
Security researchers have identified new Windows backdoors linked to the Chinese hacking firm known as FishMonger, which have been used to target government …
- Anthropic Faces Lawsuit Over Allegedly Misleading Claude AI Pricing - Decrypt
Anthropic faces a class action lawsuit alleging that its Claude Max AI subscription plans provide less usage than advertised. The plaintiff claims the company …
- Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research | Google Cloud Blog
The PRC-nexus threat actor UNC6508 targeted North American research institutions by exploiting REDCap servers and deploying the INFINITERED malware for …
- SHADOWBYT3$ Allegedly Claims Nintendo Breach and Theft of Sensitive Data
The threat actor SHADOWBYT3$ has allegedly claimed a data breach involving Nintendo, potentially targeting third-party platform TINYpulse. While the claim …
- FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service - SecurityWeek
The FBI and Google have dismantled Outsider Enterprise, a phishing-as-a-service platform that caused approximately $1.9 billion in losses by stealing millions …
- ShinyHunters Claims Council of Europe Hack - SecurityWeek
The extortion group ShinyHunters claims to have hacked the Council of Europe, allegedly stealing nearly 300 gigabytes of data containing sensitive employee and …
- PhishLumos: Exposing phishing campaigns that evade detection by hiding content - Help Net Security
PhishLumos is a system that exposes phishing campaigns by analyzing URL infrastructure—such as IP addresses and SSL certificates—rather than relying on easily …
- Hackers Abuse LNK Files, PowerShell, and Python Loader to Deploy NarwhalRAT
The NarwhalRAT malware campaign targets Korean users by utilizing deceptive LNK files, PowerShell, and a Python loader to deploy a sophisticated remote access …
- The FCC Wants to Eliminate Burner Phones - Schneier on Security
The FCC proposes a new rule to eliminate burner phones by requiring telecoms to collect personal identification and address information from all customers. …
- French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker - SecurityWeek
The French government confirmed that its secure Tchap messaging service suffered a data breach affecting over 73,000 employees. An unknown threat actor …
- Palo Alto Warns of Exploitation of VPN Bypass Exploits (CVE-2026-0257) in PAN-OS Flaw
Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect portals that allows …
- Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems - SecurityWeek
Pharmaceutical company Novo Nordisk recently disclosed a cybersecurity incident involving unauthorized access to internal systems that contained personal data …
- Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges - SecurityWeek
A Ukrainian national pleaded guilty in a US court to charges related to his development of malware for the notorious Conti ransomware group. He now faces up to …
- Velvet Ant Hackers Backdoor OpenSSH and PAM to Spy on Critical Infrastructure Network
The China-nexus actor Velvet Ant maintained a near-decade campaign by backdooring OpenSSH and PAM components to gain persistent, silent access to critical …
- PromptSnatcher Ad Blocker Extensions Steal AI Chats From ChatGPT, Claude, and Gemini
Two malicious browser extensions, Smart Adblocker and Adblock for Browser, have been identified for secretly stealing private AI chat conversations from …
- AI giant’s Dynatrace GitHub data allegedly up for sale | Cybernews
A hacker is allegedly selling 8.46GB of internal Dynatrace GitHub repositories obtained through a compromised Personal Access Token. This potential data breach …
- TikTok data leak expose 2.4B records, hackers claim | Cybernews
The alleged 2.4 billion-record TikTok data leak is likely a collection of infostealer logs rather than a direct breach of the platform. Experts warn that if …
- TikTok data leak expose 2.4B records, hackers claim | Cybernews
The alleged 2.4 billion-record TikTok data leak is likely a collection of infostealer logs rather than a direct breach of the platform. Experts warn that if …
- University of Nottingham Confirms Breach After Hackers Leak Data - SecurityWeek
The University of Nottingham has confirmed a data breach after the ShinyHunters hacker collective leaked sensitive personal and financial information from its …
- Oracle warns of security bug that hackers abused to breach 100+ companies | TechCrunch
The hacking group ShinyHunters is exploiting a critical zero-day vulnerability in Oracle PeopleSoft software to breach over 100 organizations. While Oracle has …
- Over 400 Arch Linux packages compromised to push rootkit, infostealer
Over 400 Arch User Repository (AUR) packages have been compromised to distribute an infostealer and a Linux rootkit that targets developer credentials and …
- Hackers Use OnyxC2 Malware-as-a-Service to Steal Credentials From 210 Applications
The OnyxC2 Malware-as-a-Service platform enables attackers to steal sensitive credentials from over 210 applications by disguising malicious payloads as …
- ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft | Cybersecurity Dive
The ShinyHunters threat group has exploited a critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft to target over 100 organizations, primarily …
- MCP Client OAuth Refresh-Token Support Matrix (June 2026) | RedCaller Docs | RedCaller
The MCP Client OAuth Refresh-Token Support Matrix details the status of OAuth 2.1 implementation across various clients as of June 2026. While the ecosystem …
- Early Warning Signs of Supply-Chain Attacks Live in the Dark Web
Early warning signs of supply-chain attacks are frequently hidden in the dark web within seemingly routine sales of developer access, source code, and SaaS …
- French government’s secure messaging system breached | CSO Online
The French government’s secure messaging service, Tchap, was recently breached after an intruder used social engineering to gain unauthorized access to a user …
- Malicious npm Campaign Steals SSH Keys, API Tokens, Cloud Credentials, and Wallet Secrets
A coordinated malicious npm campaign has targeted developers by distributing over 2.7 million downloads of compromised packages designed to steal SSH keys, API …
- News release: Privacy Commissioner of Canada investigation into the Grok chatbot and sexualized deepfakes finds companies violated privacy law - Office of the Privacy Commissioner of Canada
The Privacy Commissioner of Canada investigation found that X Corp. and xAI violated federal privacy law by launching the Grok chatbot without adequate …
- How Threat Intelligence Feeds Reduce SOC MTTR
How Threat Intelligence Feeds Help Automate SOCs to Reduce MTTR explains that Threat Intelligence Feeds reduce MTTR by providing high-confidence, …
- Russian Attackers Weaponize WinRAR Flaw Against Ukraine
Russia-aligned threat actors are actively exploiting a patched WinRAR vulnerability, CVE-2025-8088, to conduct cyber espionage and credential theft against …
- OpenSSL Patches High-Severity Vulnerability Found With AI - SecurityWeek
OpenSSL has released patches for 18 vulnerabilities, including a high-severity heap user-after-free bug identified as CVE-2026-45447 that could enable remote …
- Meta to Use Off-Site Business Data for Feed and AI Personalization
Meta will begin using off-site business data to personalize user Feed content and AI chatbot responses alongside its existing use for targeted advertising. …
- Anthropic just launched Claude Fable 5, its first Mythos-class AI model – but it has new safeguards to prevent misuse and will ‘fall back’ to Opus 4.8 for queries in ‘high risk’ topics | IT Pro
Anthropic has launched Claude Fable 5, a high-performance Mythos-class AI model that features robust safeguards to prevent misuse. To mitigate risks in …
- Reconstructing AI activity in investigations | Microsoft Security Blog
Reconstructing AI activity in investigations is achieved by using a new investigator playbook that leverages telemetry from Microsoft 365 Copilot and Azure AI …
- New Browser-in-the-Browser Phishing Attack to Steal Microsoft 365 Logins - Cyber Security News
A sophisticated Browser-in-the-Browser phishing campaign uses fake, draggable popups to steal Microsoft 365 login credentials and OAuth consent grants. …
- Network Log Analysis: Why Collecting Logs is Not Enough
Network Log Analysis is a critical process that transforms raw data into actionable insights for security and IT teams by centralizing, normalizing, and …
- Adobe Patches 123 Vulnerabilities - SecurityWeek
Adobe Patches 123 Vulnerabilities - SecurityWeek reports that Adobe has addressed 123 vulnerabilities across 11 products, including critical issues in …
- North Korean Hackers Targeted Tech Firms With Fake IT Workers
The North Korean hacking group FAMOUS CHOLLIMA was responsible for nearly half of all state-sponsored attacks on tech companies by posing as fake IT workers. …
- CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says | The Record from Recorded Future News
The Cybersecurity and Infrastructure Security Agency (CISA) is overhauling its vulnerability management strategy by prioritizing cyber risks based on asset …
- Microsoft Patches 200 Vulnerabilities - SecurityWeek
Microsoft’s June 2026 Patch Tuesday addresses approximately 200 vulnerabilities across its products, including three publicly disclosed flaws that could lead …
- www.neowin.net/news/goog…
Google Chrome is finalizing its transition to Manifest V3 by removing support for Manifest V2 extensions, effectively disabling bypasses for uBlock Origin. …
- arstechnica.com/security/…
Dozens of Microsoft open source packages were compromised by the Miasma worm, a credential-stealing malware triggered when developers opened the files in AI …
- www.404media.co/microsoft…
Microsoft has disabled over 70 GitHub repositories after hackers injected malware designed to steal user credentials through AI coding tools like Claude and …
- Mariner Discloses Data Breach, Says Damage Was Limited - Barron’s
Mariner Wealth Advisors experienced a data breach that exposed the personal information of nearly 9,000 individuals, though the firm confirmed that no client …
- Inklings newsletter: Is nearly all of Gaza’s population exposed in WFP cyber-attack?
A recent cyber-attack on the World Food Programme has compromised the sensitive data of approximately 600,000 households in Gaza, potentially exposing nearly …
- Conduent Business Services Data Breach Affected More Than 62.2 Million Individuals
A major data breach at Conduent Business Services compromised the protected health information of over 62.2 million individuals, ranking it as the …
- Mass data breach on over 100 Dutch hotels hits guests - DutchNews.nl
A data breach affecting over 100 Dutch hotels has exposed guest booking details, leading criminals to send fraudulent phishing payment requests. Guests are …
- techcrunch.com/2026/06/0…
The wearable health startup Ultrahuman confirmed that hackers accessed customer wellness data after stealing an employee’s credentials via malware. The breach …
- DentaQuest Data Breach Analysis: ShinyHunters Leak Exposes PII and PHI of 2.6 Million Members in 2026 – Rescana
In May 2026, the cybercriminal group ShinyHunters breached DentaQuest’s cloud infrastructure, exposing the PII and PHI of 2.6 million members. The attackers …
- Charter confirms data breach after ShinyHunters extortion threat
Charter Communications has confirmed a data breach following an extortion threat from the ShinyHunters group. While the attackers claim to have stolen millions …
- Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
The Miasma worm has compromised 73 Microsoft GitHub repositories in a significant supply chain attack that exploits the inherent trust model of open-source …
- Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It.
A researcher used Claude Opus 4.8 to uncover a four-year-old critical vulnerability in the Zcash Orchard privacy pool that could have allowed for the creation …
- UNC3753 Targets US Law Firms with Vishing, RMM Tools, and Physical Break-Ins
The threat actor UNC3753 is actively targeting US law firms through a combination of vishing, RMM tool abuse, and physical office intrusions to exfiltrate …
- Free Apps on Samsung and LG Smart TVs Secretly Turning Your Devices Into AI Proxies
Free apps on platforms like Samsung and LG are secretly utilizing a Bright Data SDK to transform Smart TVs into AI proxy nodes for web scraping. Users can …
- Critical Everest Forms Pro flaw exploited to take over WordPress sites
Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin to execute arbitrary code and seize administrative …
- New ChatGPT Lockdown Mode to Mitigate Prompt Injection and Data Exfiltration Attacks
ChatGPT Lockdown Mode is a new security feature designed to mitigate data exfiltration risks by restricting outbound network access during prompt injection …
- New Pink Extortion Group Targets Microsoft 365 Cloud Data Via Vishing Scams
The Pink Extortion Group utilizes voice phishing to manipulate employees into revealing credentials, allowing them to bypass multi-factor authentication and …
- AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
An autonomous AI agent recently identified 21 zero-day vulnerabilities in FFmpeg, while Google released a record-breaking 429 security patches for Chrome. …
- CISA Warns of Linux Kernel Improper Authentication Vulnerability Exploited in Attacks
CISA has added the Linux kernel vulnerability CVE-2022-0492 to its Known Exploited Vulnerabilities catalog due to its use in privilege escalation attacks. This …
- Instagram Fixes Password Reset Flaw That Exposes User Emails and Phone Numbers
A logic bug in the Instagram web-based password reset interface recently exposed unredacted email addresses and phone numbers of users. Meta deployed an …
- EDRChoker: Choking The Telemetry Stream to Bypass Defenses
EDRChoker is a tool that bypasses Endpoint Detection and Response (EDR) by leveraging Policy-based Quality of Service (QoS) to throttle an agent’s bandwidth to …
- Ex-Threat Intel Exec Accuses IBM and AT&T of Hiding Hacks
A False Claims Act lawsuit alleges that IBM and AT&T concealed nation-state hacking breaches and failed to implement essential security controls within their …
- Sovereignty, Resilience, AI GovernanceWebinar.
Regulations like DORA and the EU AI Act require leaders to maintain operational resilience, auditable evidence, and meaningful control over cloud and …
- hackread.com/atlas-men…
A data breach at the cheat service Atlas Menu has exposed the personal information of 64,000 users, including usernames, emails, IP addresses, and hashed …
- www.cbr.com/avatar-la…
Following the unauthorized leak of Avatar Aang: The Last Airbender, hackers have now targeted the upcoming animated project Avatar: Seven Havens. Although …
- hackread.com/miasma-ma…
The Miasma malware compromised 32 Red Hat npm packages after attackers gained access to a worker’s GitHub account to inject malicious code. This supply chain …
- biz.chosun.com/en/en-ret…
A data breach at BGF Networks has resulted in the unauthorized exposure of CU parcel service customer information, including IDs, passwords, and contact …