https://cybersecurityventures.com/wirebadger-malicious-cable-detector-for-penetration-testers-and-red-teams/
https://thehackernews.com/2026/06/the-hardest-fork.html
https://thehackernews.com/2026/06/ai-phishing-is-crushing-socs-with-alert.html
https://cloudsecurityalliance.org/articles/riskrubric-updates-ai-risk-assessment-for-the-agentic-era
https://cloudsecurityalliance.org/articles/csai-foundation-announces-riskrubric-v2-as-the-next-key-milestone-to-secure-the-agentic-control-plane
Anthropic's Project Glasswing Update - Schneier on Security
In April, Anthropic initated Project Glasswing. The idea was to let companies use their new model to find and fix vulnerabilities in their own software. It was a fantastic PR move, and so many press outlets have uncritically parroted Anthropic’s claims that it’s now common wisdom that Mythos is better at finding software vulnerabilities than other models. Which is just not true. In any case, Anthropic has published a Project Glasswing status report. It’s finding a lot of vulnerabilities in software—yay! Some of them are even dangerous. But almost none of them has been patched. It’s ...
https://cloudsecurityalliance.org/articles/the-hipaa-security-rule-is-about-to-change-what-healthcare-cisos-need-to-do-before-the-final-rule-drops
https://securityaffairs.com/193315/cyber-crime/unc3753-escalates-from-vishing-calls-to-physical-office-intrusions-at-us-legal-and-financial-firms.html
https://www.bleepingcomputer.com/news/security/oxford-university-discloses-data-breach-after-careerconnect-platform-hack/
https://cyberscoop.com/ai-security-regulation-accountability-op-ed/
https://thehackernews.com/2026/06/verdantbamboo-deploys-bsd-variant-of.html
https://www.malwarebytes.com/blog/threat-intel/2026/06/pirated-pc-games-are-delivering-password-stealing-malware
https://securityaffairs.com/193307/ai/meta-ai-recovery-tool-flaw-exposed-20000-instagram-accounts.html
https://www.numerama.com/cyberguerre/2270181-pour-empecher-les-fuites-de-donnees-chatgpt-lance-un-mode-verrouille-voici-ce-quil-bloque-et-ce-quil-ne-bloque-pas.html
ChatGPT empoisonné : comment des hackers parviennent à piéger les fans de shopping - Numerama
Dans un article paru le 7 juin 2026, le quotidien britannique The Guardian décrit comment des escrocs sont parvenus à faire remonter des boutiques clonées dans les réponses de ChatGPT. Une technique qui a exploité à la fois les failles des LLM et la disparition d'une marque emblématique. La cible de cette campagne
https://www.cybersecuritydive.com/spons/the-new-risk-equation-why-endpoint-security-is-a-financial-imperative/821449/
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
UNC3753 hit dozens of U.S. firms in Jan-May 2026 using vishing and RMM tools, driving rapid data theft extortion.
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks
VS Code 1.123 adds a two-hour delay before extensions auto-update to newer versions when automatic updates are enabled.
A week in security (June 1 - June 7) | Malwarebytes
A list of topics we covered in the week of June 1 to June 7 of 2026
Over 20,000 Instagram accounts stolen in Meta AI support hack
Meta has revealed that over 20,000 Instagram users had their accounts hijacked in a recent incident where attackers used Meta's AI-powered support system to reset passwords.
Hands on with Intelligent Terminal, an AI-powered Windows Terminal
Microsoft has created an open-source fork of Windows Terminal called "Intelligent Terminal," and it allows you to use AI directly inside Terminal without interfering with the regular session.
Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms | Microsoft Security Blog
Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiving the highest scores in both the current offering and strategy categories.
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection | Microsoft Security Blog
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection.
DentaQuest Breach: ShinyHunters Publish Data Impacting 2.6M People
ShinyHunters leaked 234 GB of data allegedly stolen from DentaQuest after failed negotiations, potentially impacting 2.6 million people.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 100 - Security Affairs
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape
Security Affairs newsletter Round 580 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs.
« Au début, on nous prenait pour des fous » : entretien avec William Méauzoone, co-fondateur du cloud français Leviia - Numerama
Alors que le contexte géopolitique place la souveraineté numérique au cœur des débats et que la doctrine française en matière d'achats numériques priorise désormais clairement les acteurs français et européens, Numerama est allé à la rencontre des dirigeants qui composent l'écosystème tech souverain français pour
Silent Ransom Group targets law firms with fake IT support calls
The Silent Ransom Group extortion gang is actively targeting U.S. law firms and professional services organizations in social engineering attacks that often lead to data theft within hours of initial contact, according to a new report by cybersecurity firm Mandiant.
C0XMO botnet spreads via DD-WRT router flaw, kills rival malware
A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures.
Objective-See: Blog
Posts about macOS malware, exploits, and tools