List cybersec
ISC Stormcast For Wednesday, June 3rd, 2026 https://isc.sans.edu/podcastdetail/9956, (Wed, Jun 3rd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "ISC Stormcast podcast details for June 3rd, 2026." }
2:10 am, June 3, 2026 Cybersecurity
OpenAI upgrades GPT-5.5, as it plans to retire legacy ChatGPT models
{"priority":"INFO","cve":"N/A","target":"GPT-5.5","threat_actor":"N/A","patch_ready":false,"insight":"OpenAI upgrades GPT-5.5 with improvements ahead of legacy ChatGPT model retirement"}
11:10 pm, June 2, 2026 Cybersecurity
Microsoft's Coreutils project brings Linux commands to Windows
{ "priority": "INFO", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft releases Coreutils for Windows, bringing Linux command-line util..
11:10 pm, June 2, 2026 Cybersecurity
Over 116,000 Mincraft systems infected in WeedHack malware campaign
{ "priority": "HIGH", "cve": "N/A", "target": "Minecraft", "threat_actor": "WeedHack", "patch_ready": false, "insight": "WeedHack malware campaign infects over 116,000 Minecraft systems." ..
10:15 pm, June 2, 2026 Cybersecurity
Critical Kirki flaw exploited to hijack WordPress admin accounts
{ "priority": "CRITICAL", "cve": "CVE-2026-8206", "target": "Kirki plugin for WordPress", "threat_actor": "N/A", "patch_ready": true, "insight": "Hackers exploit critical Kirki plugin vuln..
10:15 pm, June 2, 2026 Cybersecurity
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
{ "priority": "HIGH", "cve": "CVE-2025-48595", "target": "Android", "threat_actor": "N/A", "patch_ready": true, "insight": "Google patches 124 flaws in June 2026 Android update, including ..
8:10 pm, June 2, 2026 Cybersecurity
AI-built ransomware toolkit automates EDR evasion, AD discovery
{ "priority": "HIGH", "cve": "N/A", "target": "Endpoint Detection and Response (EDR) solutions", "threat_actor": "Unknown threat actor", "patch_ready": false, "insight": "AI-built ransomwa..
8:10 pm, June 2, 2026 Cybersecurity
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
{ "priority": "CRITICAL", "cve": "CVE-2024-21182", "target": "Oracle WebLogic Server", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA adds CVE-2024-21182 to KEV Catalog due t..
7:10 pm, June 2, 2026 Cybersecurity
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
{ "priority": "HIGH", "cve": "CVE-2025-8088", "target": "WinRAR", "threat_actor": "Gamaredon", "patch_ready": false, "insight": "Gamaredon exploits WinRAR vulnerability CVE-2025-8088 to de..
7:10 pm, June 2, 2026 Cybersecurity
Microsoft Exchange Online outage causes email delays, failures
{"priority": "INFO", "cve": "N/A", "target": "Microsoft Exchange Online", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft is addressing a service issue causing email delays and fail..
5:10 pm, June 2, 2026 Cybersecurity
Why the browser is now the front line for AI security
AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why browser visibility is becoming critical for both threat detection and AI govern..
4:10 pm, June 2, 2026 Cybersecurity
Instagram users locked out after Meta AI abused to steal accounts
Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. [...]
4:10 pm, June 2, 2026 Cybersecurity
CISA flags two-year-old Oracle flaw as actively exploited in attacks
{ "priority": "HIGH", "cve": "N/A", "target": "Oracle WebLogic Server", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA flags two-year-old Oracle WebLogic Server vulnerability..
1:10 pm, June 2, 2026 Cybersecurity
How Leading Organizations Are Turning EDR Into Operational Resilience
{"priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The adoption of Endpoint Detection and Response (EDR) is increasing as organizations move b..
12:10 pm, June 2, 2026 Cybersecurity
Google fixes one actively exploited Android zero-day, 124 flaws
{ "priority": "CRITICAL", "cve": "N/A", "target": "Android", "threat_actor": "N/A", "patch_ready": true, "insight": "Google fixed an actively exploited Android zero-day and 124 other flaws..
12:10 pm, June 2, 2026 Cybersecurity
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
{ "priority": "CRITICAL", "cve": "N/A", "target": "Vulnerability Management Systems", "threat_actor": "N/A", "patch_ready": false, "insight": "AI-driven exploitation timelines are rapidly ..
12:10 pm, June 2, 2026 Cybersecurity
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
{"priority": "HIGH", "cve": "N/A", "target": "Afghanistan Finance Ministry", "threat_actor": "SideCopy", "patch_ready": false, "insight": "Pakistan-linked SideCopy group targets Afghanistan's Ministry..
10:10 am, June 2, 2026 Cybersecurity
New Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A new wave of phishing emails containing SVG files has been observed, using im..
8:10 am, June 2, 2026 Cybersecurity
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
{"priority":"LOW","cve":"N/A","target":"Dashlane","threat_actor":"Unknown","patch_ready":false,"insight":"Dashlane disclosed a brute-force attack affecting fewer than 20 personal subscription plan use..
5:10 am, June 2, 2026 Cybersecurity
ISC Stormcast For Tuesday, June 2nd, 2026 https://isc.sans.edu/podcastdetail/9954, (Tue, Jun 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, June 2, 2026 Cybersecurity
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. [...]
11:10 pm, June 1, 2026 Cybersecurity
Spain arrests doxer leaking sensitive data of govt employees
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Spanish authorities arrested an individual for leaking sensitive information of..
10:10 pm, June 1, 2026 Cybersecurity
Red Hat npm packages compromised to steal developer credentials
{ "priority": "HIGH", "cve": "N/A", "target": "Red Hat npm packages", "threat_actor": "Shai-Hulud", "patch_ready": false, "insight": "Red Hat npm packages compromised by Shai-Hulud malware..
10:10 pm, June 1, 2026 Cybersecurity
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
{ "priority": "HIGH", "cve": "N/A", "target": "Red Hat npm Packages", "threat_actor": "Mini Shai-Hulud", "patch_ready": false, "insight": "Miasma supply chain attack campaign compromises R..
7:10 pm, June 1, 2026 Cybersecurity
Dashlane password manager users locked out by brute force attacks
{ "priority": "HIGH", "cve": "N/A", "target": "Dashlane password manager", "threat_actor": "N/A", "patch_ready": false, "insight": "Multiple Dashlane users locked out by brute force attack..
7:10 pm, June 1, 2026 Cybersecurity
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions be..
6:10 pm, June 1, 2026 Cybersecurity
WordPress malware campaign hides payloads in Steam profiles
{ "priority": "HIGH", "cve": "N/A", "target": "WordPress", "threat_actor": "N/A", "patch_ready": false, "insight": "A malware campaign is targeting nearly 2,000 WordPress websites, hiding ..
5:10 pm, June 1, 2026 Cybersecurity
Microsoft investigates Office Apps, Teams file access issues
Microsoft says an ongoing incident is preventing users of its Teams collaboration platform and Office for the web cloud-based productivity suite from opening files. [...]
3:10 pm, June 1, 2026 Cybersecurity
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
``` { "priority": "HIGH", "cve": "N/A", "target": "Czech Republic, Taiwan", "threat_actor": "China-Aligned Groups", "patch_ready": false, "insight": "China-Aligned Groups are conducting a ..
2:10 pm, June 1, 2026 Cybersecurity
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A weekly recap of various cybersecurity issues including a new Linux flaw, PAN..
2:10 pm, June 1, 2026 Cybersecurity
Race Against Time: Why Faster Vulnerability Alerts Matter
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The article discusses the importance of faster vulnerability alerts to help or..
2:10 pm, June 1, 2026 Cybersecurity
Microsoft fixes outage affecting MFA setup, MySignIn service
{ "priority": "MEDIUM", "cve": "N/A", "target": "Microsoft MFA setup, MySignIn service", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft is addressing an ongoing inciden..
1:10 pm, June 1, 2026 Cybersecurity
Webinar tomorrow: From alert to resolution in network incident response
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A webinar is being held to discuss how automation and AI-assisted workflows ca..
1:10 pm, June 1, 2026 Cybersecurity
Critical Windows Netlogon RCE flaw now exploited in attacks
{ "priority": "CRITICAL", "cve": "CVE-2022-37966", "target": "Windows Netlogon", "threat_actor": "N/A", "patch_ready": true, "insight": "Threat actors are exploiting a recently patched cri..
1:10 pm, June 1, 2026 Cybersecurity
The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools
Three years ago, the practical question for an MSP building a cybersecurity practice was which "vCISO platform" to buy. The term was good shorthand for the work at the time: assessments, advisory, rep..
12:10 pm, June 1, 2026 Cybersecurity
Microsoft confirms outage affecting MFA, My Sign-Ins platform
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft MFA, My Sign-Ins platform", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft is experiencing an outage affecting ..
12:10 pm, June 1, 2026 Cybersecurity
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
{ "priority": "HIGH", "cve": "N/A", "target": "OpenAI Codex", "threat_actor": "N/A", "patch_ready": false, "insight": "A malicious supply chain campaign targets developers using OpenAI Cod..
11:10 am, June 1, 2026 Cybersecurity
Microsoft fixes KB5089549 Windows security update install issues
{ "priority": "INFO", "cve": "N/A", "target": "Windows 11", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft resolved installation issues with the May 2024 Windows 11 sec..
11:10 am, June 1, 2026 Cybersecurity
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
Threat actors are attempting to actively exploit a critical security flaw impacting WP Maps Pro, a WordPress plugin that has had over 15,000 sales on the Envato Market, to create malicious administrat..
10:10 am, June 1, 2026 Cybersecurity
ISC Stormcast For Monday, June 1st, 2026 https://isc.sans.edu/podcastdetail/9952, (Mon, Jun 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, June 1, 2026 Cybersecurity
Unidentified RAT pushes NetSupport RAT, (Mon, Jun 1st)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "Unidentified RAT", "patch_ready": false, "insight": "Unidentified RAT pushes NetSupport RAT." }
12:10 am, June 1, 2026 Cybersecurity
YARA-X 1.17.0 Release, (Sun, May 31st)
{ "priority": "INFO", "cve": "N/A", "target": "YARA-X", "threat_actor": "N/A", "patch_ready": false, "insight": "YARA-X version 1.17.0 has been released with performance improvements and a..
4:10 pm, May 31, 2026 Cybersecurity
WP Maps Pro bug exploited to create admin accounts on WordPress sites
Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue administrator accounts without authentication. [...]
3:10 pm, May 31, 2026 Cybersecurity
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Dutch authorities dismantle botnet linked to 17 million infected devices, incl..
1:10 pm, May 31, 2026 Cybersecurity
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
{ "priority": "HIGH", "cve": "CVE-2026-0257", "target": "Palo Alto Networks PAN-OS GlobalProtect", "threat_actor": "N/A", "patch_ready": false, "insight": "Hackers are exploiting a Palo Al..
6:10 pm, May 30, 2026 Cybersecurity
New CIFSwitch Linux flaw gives root on multiple distributions
A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request m..
3:10 pm, May 30, 2026 Cybersecurity
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
{ "priority": "HIGH", "cve": "CVE-2026-0257", "target": "PAN-OS and Prisma Access", "threat_actor": "N/A", "patch_ready": true, "insight": "Palo Alto Networks warns that CVE-2026-0257, a m..
8:10 am, May 30, 2026 Cybersecurity
New Russia-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks
{ "priority": "HIGH", "cve": "N/A", "target": "Ukraine", "threat_actor": "GREYVIBE", "patch_ready": false, "insight": "New Russia-linked threat actor GREYVIBE targets Ukraine with AI-power..
7:10 am, May 30, 2026 Cybersecurity
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
{ "priority": "HIGH", "cve": "N/A", "target": "OpenAI ChatGPT", "threat_actor": "N/A", "patch_ready": false, "insight": "ChatGPhish vulnerability in ChatGPT allows phishing via Markdown li..
7:10 pm, May 29, 2026 Cybersecurity
ChatGPT share links abused to host fake outage pages to deliver malware
Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. [...]
7:10 pm, May 29, 2026 Cybersecurity
AI Testing
