News

The article discusses a prevalent sextortion scam, where scammers claim to have recorded individuals via webcam while engaging in inappropriate activities, demanding payment to prevent the release of the purported footage. The emails often contain vague…

The cybersecurity firm LastPass has reported that it was affected by a recent hack involving Klue, wherein a threat actor named Icarus used compromised credentials to access the systems of Klue. This breach resulted in unauthorized access to connected…

The article describes the StrikeShark campaign, involving new malware called SharkLoader, used to deploy Cobalt Strike agents. Initial infections were achieved through exploiting vulnerabilities in public-facing applications such as Microsoft Exchange and…

In June 2026, researcher Volodymyr Diachenko discovered that a live server exposed valid credentials for over 73,000 Fortinet firewalls, revealing a large-scale access-brokering operation known as FortiBleed. This leak provided login credentials for devices…

A new report by ReliaQuest highlights that AI is making cyberattacks cheaper, faster, and more covert, while not fundamentally changing the nature of intrusions. Over the past two years, AI utilization in cybercrime has evolved from basic phishing…

A crypto clipboard hijacker, linked to a suspected operator on Telegram, targets cryptocurrency holders and traders. Identified by Check Point Research, this malware reinvents its promotion tactics, resembling marketing strategies to create a false sense of…

The article discusses the Department of Justice (DoJ)'s recent seizure of a Huione Cloud account linked to a cyber scam involving money laundering. This highlights ongoing challenges in cybersecurity, particularly in the areas of cybercrime and financial…

UK lawmakers from the Public Accounts Committee (PAC) have expressed concerns regarding the cybersecurity preparedness of national galleries and museums, criticizing the Department for Culture, Media and Sport (DCMS) for its reactive approach. The PAC…

The article discusses a substantial fraud scheme surrounding the FIFA 2026 World Cup, dubbed Operation FanTrap, identified by Cyble Research and Intelligence Labs (CRIL). The scheme involves nearly 4,000 fake domains that target football fans worldwide,…

On June 23, 2026, a nationwide outage of Deutsche Bahn's GSM-R system halted all trains across Germany, causing significant disruptions in rail services. The GSM-R system, essential for train communication, suffered a failure, leading to a halt in…

The article discusses the rapid advancement of AI in cybersecurity, focusing on how it transforms vulnerabilities into actionable exploits in significantly less time. Traditional patch-and-pentest methods are becoming less effective as the key question…

The article discusses a recently exploited vulnerability in Cisco Unified Communications Manager (CM) after a proof-of-concept (PoC) demonstrated a file-write path to root. This breach highlights significant security risks in network communications,…

The article by Xavier Mertens discusses the technique of Linux process name masquerading, where malicious processes can disguise themselves using non-suspicious names. It references the MITRE ATT&CK framework (T1036) and emphasizes that both the process name…

A ClickFix malvertising campaign exploited the shared chat feature of claude.ai, delivering the MacSync infostealer malware that compromised browser credentials, cookies, SSH keys, and cryptocurrency wallet files. The attackers utilized Google Ads to lead…

A critical vulnerability (CVE-2026-20230) in Cisco's Unified Communications Manager (Unified CM) has been exploited by attackers. This flaw allows unauthenticated remote access for Server Side Request Forgery (SSRF) attacks and could enable privilege…

TL;DR Security researcher Pavitra Jha published full details regarding a severe Linux kernel vulnerability. Specifically, this MediaTek t7xx

A recent health care fraud takedown resulted in the arrest of 455 defendants, including 90 medical professionals, across 45 states. The operation targeted false claims, telemedicine fraud, and illegal opioid distribution, alleging over $6.5 billion in…

A U.S. official disclosed that Anthropic's AI model, Mythos, identified vulnerabilities in secure U.S. government systems during testing with intelligence agencies. This effort is part of Project Glasswing, aiming to address significant public safety and…

The article discusses the development of a new internet protocol called Private Access Control Tokens (PACT), created through a collaboration between Cloudflare, Google Chrome, Mozilla Firefox, and Microsoft Edge. This protocol aims to authenticate…

The ISC Stormcast for June 24th, 2026, is managed by Xavier Mertens and reports a threat level of green. The broadcast includes insights regarding classes taught by Dr. Johannes Ullrich for SANS. Additionally, the page provides a variety of links related to…

The page highlights four critical vulnerabilities in the containerd runtime, particularly affecting cloud infrastructure. Specifically, the vulnerabilities CVE-2026-53492, CVE-2026-53488, and CVE-2026-50195 allow for arbitrary code execution and image cache…

The page discusses critical vulnerabilities recently detected in Webmin, a web-based administrative tool for Unix-like servers. It highlights three specific flaws: CVE-2026-56020 (critical authentication bypass), CVE-2026-56021 (information disclosure), and…

A critical vulnerability, tracked as CVE-2026-47729 and dubbed 'Squidbleed', has been discovered in the Squid web proxy, enabling leakage of users' HTTP requests, including sensitive data such as passwords and session tokens. This issue has remained…

The Internet Society Foundation has opened applications for the Common Good Cyber Fund (CGCF) from June 23 to August 4, 2026. This global initiative aims to provide at least $3.5 million in funding through approximately 15 two-year grants to support…

The White House has accelerated the timeline for government agencies to adopt quantum-resistant encryption, necessitating a transition to these systems by 2030 for high-value assets and by 2031 for digital signature schemes, five years ahead of previous…

The article discusses OpenClaw, an AI agent utilizing third-party skills from ClawHub, which has been exploited for malicious purposes. The study highlights that early campaigns saw several malicious skills targeting users, particularly infostealers and…

A new vulnerability known as 'Cordyceps' threatens CI/CD workflows by allowing attackers to exploit malicious pull requests to compromise software supply chains. The issue affects notable platforms including Microsoft's Azure Sentinel and Google's AI Agent…