Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
DoubleClick redirects hide DesckVB RAT malspam, using dynamic lures and .NET loaders to evade detection and control hosts.
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
Microsoft confirms it temporarily removed GitHub repos after Miasma worm compromised 73 of its open-source projects to inject an information stealer.
XBOW tests Anthropic's Mythos Preview for offensive security
Anthropic's Mythos Preview was highly effective at finding vulnerability candidates, especially when analyzing source code. XBOW explores how the model performed across exploit discovery, reverse engineering, and live-site validation.
Miasma Worm Compromises 73 Microsoft GitHub Repositories
Miasma worm compromised 73 MS GitHub repos, spreading via AI coding tools and stealing cloud credentials from developers and CI/CD systems
GitHub disables Microsoft repos pushing password-stealing malware
Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples, and MicrosoftDocs organizations on GitHub, disrupting continuous integration pipelines.
Check Point warns of zero-day flaw targeted by ransomware affiliate
A vulnerability in the company鈥檚 VPN deployments has faced exploitation since early May.
https://cyberscoop.com/cisco-sdwan-zero-day-vulnerability-exploited-cve202620245/
https://www.schneier.com/blog/archives/2026/06/gps-as-a-key-distribution-platform.html
https://www.cybersecuritydive.com/news/china-cyberattacks-it-sector-crowdstrike-report/822366/
https://www.numerama.com/cyberguerre/2272059-test-cedric-une-notification-credit-agricole-seme-le-trouble-lappli-tombe-dans-la-foulee.html
Meta's face-recognition code raises new concerns about smart glasses | Malwarebytes
As smart glasses become more capable, concerns about face recognition, covert recording, and biometric surveillance are growing.
https://www.bleepingcomputer.com/news/security/new-veeam-vulnerability-exposes-backup-servers-to-rce-attacks/
https://therecord.media/hackers-pose-as-women-seeking-romance-russian-military
https://www.numerama.com/cyberguerre/2271777-cest-fait-les-arnaques-au-livreur-franchissent-une-etape-que-vous-navez-jamais-vue-ou-entendue.html
https://www.malwarebytes.com/blog/scams/2026/06/scammers-love-meta-according-to-lloyds-bank
https://cloudsecurityalliance.org/articles/how-c-suite-leaders-are-taming-shadow-ai
https://cybersecurityventures.com/2026-ciso-compensation-data-salaries-bonuses-equity/
https://thehackernews.com/2026/06/chrome-v8-zero-day-cve-2026-11645.html
https://thehackernews.com/2026/06/researchers-build-self-replicating-ai.html
https://thehackernews.com/2026/06/winrar-flaw-exploited-by-russia-aligned.html
https://cloudsecurityalliance.org/articles/financial-services-industry-shifts-from-ai-adoption-to-governance-as-autonomous-systems-proliferate-cloud-security-alliance-survey-finds
https://thehackernews.com/2026/06/hades-pypi-attack-19-packages-poisoned.html
https://thehackernews.com/2026/06/new-frost-attack-lets-websites-track.html
https://www.malwarebytes.com/blog/bugs/2026/06/update-chrome-google-patches-actively-exploited-vulnerability-and-73-others
https://securityaffairs.com/193371/hacking/google-fixes-fifth-actively-exploited-chrome-zero-day-of-2026.html
https://thehackernews.com/2026/06/the-hidden-security-risk-in-modern.html
https://www.bleepingcomputer.com/news/security/french-govt-messaging-service-breached-in-account-hijacking-attack/
https://www.numerama.com/cyberguerre/2271479-messagerie-tchap-piratee-letat-rassure-et-le-hacker-jubile-pourquoi-est-ce-si-difficile-de-denicher-la-verite.html
https://securityaffairs.com/193343/security/u-s-cisa-adds-berriai-litellm-and-check-point-security-gateway-flaws-to-its-known-exploited-vulnerabilities-catalog.html
https://www.cybersecuritydive.com/news/ai-executive-impersonation-outtake-survey/822235/