List cybersec
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
{ "priority": "HIGH", "cve": "N/A", "target": "Tailscale and OpenSSH", "threat_actor": "Junior Hacker", "patch_ready": false, "insight": "A junior hacker used Tailscale and OpenSSH to main..
5:10 pm, June 17, 2026 Cybersecurity
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research. The threa..
7:10 pm, June 17, 2026 Cybersecurity
Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
{ "priority": "CRITICAL", "cve": "CVE-2026-50656", "target": "Microsoft Defender", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft confirms a zero-day vulnerability in D..
7:10 pm, June 17, 2026 Cybersecurity
Google to use UK and EU user IP addresses for ad personalization
{"priority":"INFO","cve":"N/A","target":"Google","threat_actor":"N/A","patch_ready":false,"insight":"Google to use UK and EU user IP addresses for ad personalization"}
9:10 pm, June 17, 2026 Cybersecurity
ISC Stormcast For Thursday, June 18th, 2026 https://isc.sans.edu/podcastdetail/9978, (Thu, Jun 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, June 18, 2026 Cybersecurity
The Behavior of Coordinated SSH Brute Force Attacks over the last three months [Guest Diary], (Wed, Jun 17th)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A guest diary by Adam Nason discusses the behavior of coordinated SSH brute fo..
2:10 am, June 18, 2026 Cybersecurity
Leak confirms OpenAI is testing a ChatGPT for Science subscription
{ "priority": "INFO", "cve": "N/A", "target": "OpenAI ChatGPT", "threat_actor": "N/A", "patch_ready": false, "insight": "OpenAI is testing a new ChatGPT subscription for science use cases...
2:10 am, June 18, 2026 Cybersecurity
Microsoft fixes Windows Server 2016 security update failures
{ "priority": "MEDIUM", "cve": "N/A", "target": "Windows Server 2016", "threat_actor": "N/A", "patch_ready": true, "insight": "Microsoft fixed a known issue causing June 2024 security upda..
11:10 am, June 18, 2026 Cybersecurity
F5 issues out-of-band patches for critical NGINX vulnerabilities
{ "priority": "CRITICAL", "cve": "N/A", "target": "NGINX", "threat_actor": "N/A", "patch_ready": true, "insight": "F5 releases out-of-band patches for critical NGINX vulnerabilities allowi..
12:10 pm, June 18, 2026 Cybersecurity
The Scripts on Your Checkout Page Are Now a PCI DSS Problem
{ "priority": "MEDIUM", "cve": "N/A", "target": "PCI DSS", "threat_actor": "N/A", "patch_ready": false, "insight": "The Scripts on Your Checkout Page Are Now a PCI DSS Problem" }
12:10 pm, June 18, 2026 Cybersecurity
ShapedPlugin update flow hacked to infect WordPress sites
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor's official update system. [...]
1:10 pm, June 18, 2026 Cybersecurity
Apple fixes Beats Studio Buds flaw that let hackers spy on conversations
{ "priority": "HIGH", "cve": "N/A", "target": "Beats Studio Buds", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple patched a high-severity flaw in Beats Studio Buds that allo..
1:10 pm, June 18, 2026 Cybersecurity
Telegram admits it couldn't police exam-leak channels, India tells court
{ "priority": "INFO", "cve": "N/A", "target": "Telegram", "threat_actor": "N/A", "patch_ready": false, "insight": "Telegram faced criticism from India's government for allegedly failing to..
1:10 pm, June 18, 2026 Cybersecurity
Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network
{"priority":"MEDIUM","cve":"N/A","target":"AI Agents","threat_actor":"N/A","patch_ready":false,"insight":"Enterprises struggle to track and manage autonomous AI agents, leading to potential hidden acc..
1:10 pm, June 18, 2026 Cybersecurity
5 reasons Microsoft 365 backup isn’t enough for business data protection
{ "priority": "LOW", "cve": "N/A", "target": "Microsoft 365", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft 365 backup has limitations for business data protection" }
2:10 pm, June 18, 2026 Cybersecurity
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
{ "priority": "HIGH", "cve": "N/A", "target": "Microsoft Teams", "threat_actor": "DragonForce", "patch_ready": false, "insight": "DragonForce hackers abuse Microsoft Teams to hide Backdoor..
2:10 pm, June 18, 2026 Cybersecurity
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
{ "priority": "HIGH", "cve": "N/A", "target": "WordPress", "threat_actor": "Evil Corp", "patch_ready": false, "insight": "Law enforcement agencies dismantled nearly 15,000 SocGholish-infec..
2:10 pm, June 18, 2026 Cybersecurity
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
{"priority":"HIGH","cve":"N/A","target":"Windows","threat_actor":"Microsoft Defender Security Research Team","patch_ready":false,"insight":"Microsoft disclosed a Windows-based cryptocurrency clipper c..
3:10 pm, June 18, 2026 Cybersecurity
Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks
Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign. [...]
3:10 pm, June 18, 2026 Cybersecurity
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "INC Ransomware", "patch_ready": false, "insight": "INC Ransomware has emerged as a major RaaS threat with over 830 vic..
3:10 pm, June 18, 2026 Cybersecurity
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
I don't have access to read_lines information.
4:10 pm, June 18, 2026 Cybersecurity
USB worm spreads crypto-stealing malware via Windows shortcut files
{ "priority": "HIGH", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "A USB worm is spreading crypto-stealing malware via Windows shortcut files..
5:10 pm, June 18, 2026 Cybersecurity
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
{ "priority": "HIGH", "cve": "N/A", "target": "NetNut", "threat_actor": "Popa", "patch_ready": false, "insight": "The Popa botnet, linked to Alarum Technologies Ltd, has been used for adve..
6:10 pm, June 18, 2026 Cybersecurity
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
{ "priority": "CRITICAL", "cve": "CVE-2026-42530", "target": "NGINX Open Source", "threat_actor": "N/A", "patch_ready": true, "insight": "F5 patches critical NGINX Open Source flaws enabli..
7:10 pm, June 18, 2026 Cybersecurity
Nintendo confirms data stolen in WebMD subsidiary cyberattack
{ "priority": "INFO", "cve": "N/A", "target": "Nintendo", "threat_actor": "N/A", "patch_ready": false, "insight": "Nintendo confirms data stolen in WebMD subsidiary cyberattack, threat act..
8:10 pm, June 18, 2026 Cybersecurity
Gentlemen ransomware uses multiple EDR killers to disable defenses
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks. [...]
11:10 pm, June 18, 2026 Cybersecurity
CISA warns Fortinet users to secure devices after FortiBleed leak
{ "priority": "CRITICAL", "cve": "N/A", "target": "Fortinet", "threat_actor": "N/A", "patch_ready": false, "insight": "CISA warns Fortinet users to secure devices after FortiBleed leak exp..
7:10 am, June 19, 2026 Cybersecurity
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
{ "priority": "HIGH", "cve": "CVE-2025-20701", "target": "Beats Studio Buds", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple patched a high-severity vulnerability in Beats S..
7:10 am, June 19, 2026 Cybersecurity
eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)
{ "priority": "INFO", "cve": "N/A", "target": "Belgian bank", "threat_actor": "N/A", "patch_ready": false, "insight": "Detected phishing email targeting a major Belgian bank via IPv4-mappe..
8:10 am, June 19, 2026 Cybersecurity
NY man charged after harassing college student with AI-generated nudes
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A New York man was charged with cyberstalking for allegedly using AI-generated ..
9:10 am, June 19, 2026 Cybersecurity
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
{ "priority": "HIGH", "cve": "N/A", "target": "Salesforce", "threat_actor": "N/A", "patch_ready": false, "insight": "Salesforce disabled Klue app integration due to OAuth token abuse expos..
10:10 am, June 19, 2026 Cybersecurity
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
{ "priority": "CRITICAL", "cve": "N/A", "target": "Splunk Enterprise", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA urges U.S. federal agencies to patch a critical Splunk E..
11:10 am, June 19, 2026 Cybersecurity
Microsoft: June 2026 Windows updates break Recycle Bin prompts
{ "priority": "LOW", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft confirmed a Windows bug causing incorrect filenames in Recycle Bi..
12:10 pm, June 19, 2026 Cybersecurity
Forget Data Leakage: Shadow AI's Real Threat Is Access Control
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The main concern with Shadow AI has shifted from data leakage to an access con..
12:10 pm, June 19, 2026 Cybersecurity
Webinar: How attackers bypass MFA and how defenders can respond
Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate accounts without stealing passwords. This webinar explores how behavioral..
1:10 pm, June 19, 2026 Cybersecurity
From Assistive to Agentic: The AI Shift That's Redefining Threat Management
{"priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "An article about how to earn a billion dollars"}
1:10 pm, June 19, 2026 Cybersecurity
Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way
{ "priority": "MEDIUM", "cve": "N/A", "target": "AI Agents", "threat_actor": "N/A", "patch_ready": false, "insight": "AI agents are becoming a new identity and governance challenge as they..
2:10 pm, June 19, 2026 Cybersecurity
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thou..
3:10 pm, June 19, 2026 Cybersecurity
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites
{ "priority": "HIGH", "cve": "N/A", "target": "WordPress", "threat_actor": "SocGholish", "patch_ready": true, "insight": "Dutch law enforcement disrupted SocGholish servers and cleaned 14,..
4:10 pm, June 19, 2026 Cybersecurity
Texas govt data breach exposes over 3 million driver’s licenses
{ "priority": "HIGH", "cve": "N/A", "target": "Texas Parks and Wildlife Department (TPWD) license system", "threat_actor": "N/A", "patch_ready": false, "insight": "A data breach at TPWD's ..
5:10 pm, June 19, 2026 Cybersecurity
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web pag..
5:10 pm, June 19, 2026 Cybersecurity
Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
{"priority": "CRITICAL", "cve": "N/A", "target": "Apple A12 and A13 chips", "threat_actor": "Paradigm Shift", "patch_ready": false, "insight": "An unpatchable exploit called 'usbliter8' breaks Apple A..
7:10 pm, June 19, 2026 Cybersecurity
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
{ "priority": "HIGH", "cve": "N/A", "target": "EDR systems", "threat_actor": "The Gentlemen", "patch_ready": false, "insight": "The Gentlemen RaaS uses GentleKiller EDR framework to target..
7:10 pm, June 19, 2026 Cybersecurity
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
{ "priority": "HIGH", "cve": "N/A", "target": "Gravity SMTP WordPress plugin", "threat_actor": "N/A", "patch_ready": false, "insight": "Hackers are exploiting an unauthenticated informatio..
9:10 pm, June 19, 2026 Cybersecurity
Klue OAuth breach victim list grows as Icarus hackers claim attack
Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers' Salesforce environments, as the new "..
11:10 pm, June 19, 2026 Cybersecurity
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
{"priority":"HIGH","cve":"CVE-2026-4020","target":"Gravity SMTP WordPress Plugin","threat_actor":"Hackers","patch_ready":true,"insight":"Hackers are exploiting a patched security flaw in Gravity SMTP,..
11:10 am, June 20, 2026 Cybersecurity
Microsoft links Mastra AI supply chain attack to North Korean hackers
{ "priority": "HIGH", "cve": "N/A", "target": "Mastra AI", "threat_actor": "Sapphire Sleet (BlueNoroff)", "patch_ready": false, "insight": "North Korean hackers linked to Mastra AI supply ..
3:10 pm, June 20, 2026 Cybersecurity
New Prinz Eugen ransomware prioritizes recent files for encryption
{"priority":"HIGH","cve":"N/A","target":"Prinz Eugen ransomware","threat_actor":"N/A","patch_ready":false,"insight":"New Prinz Eugen ransomware prioritizes recent files for encryption and leaves no ra..
4:10 pm, June 20, 2026 Cybersecurity
AryStinger botnet infected thousands of D-Link routers worldwide
{"priority": "HIGH", "cve": "N/A", "target": "D-Link routers", "threat_actor": "AryStinger", "patch_ready": false, "insight": "AryStinger botnet infects thousands of outdated D-Link routers to create ..
3:10 pm, June 21, 2026 Cybersecurity
ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A summary of an article on how to earn a billion dollars." }
2:10 am, June 22, 2026 Cybersecurity
AI Testing
