Cisco warns of critical Unified CM flaw with PoC exploit code
Cisco has released security updates to patch a critical-severity Unified Communications Manager (Unified CM) flaw that allows attackers to gain root privileges.
Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure Process
A researcher publicly released a VS Code exploit within hours, citing past disputes with Microsoft over bug handling.
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
Unknown attackers maintained at least five months of access to a senior global stock exchange executive鈥檚 Outlook mailbox.
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
A large-scale campaign impersonates open-source and freeware project portals to redirect users through a gated TDS and deliver malware.
Google lance Dreambeans une app qui transforme vos donn茅es personnelles en BD illustr茅e chaque matin - Numerama
Le 3 juin 2026, Google Labs a lanc茅 Dreambeans, une application exp茅rimentale qui fouille vos mails, votre agenda et votre historique YouTube pendant que vous dormez pour vous livrer chaque matin une s茅lection d'histoires illustr茅es par IA. La pr茅sentation a 茅t茅 faite sur le site officiel de Google Labs, l'茅quipe qui
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
CISA added CVE-2026-45247, a CVSS 9.8 Mirasvit Cache Warmer flaw affecting Magento stores, to its KEV catalog after active exploitation.
Meta's AI support bot happily handed Instagram accounts to hackers | Malwarebytes
Hackers convinced an AI support bot to hand over Instagram accounts by changing recovery email addresses.
29 Arrests, Nine Crime Groups Dismantled: Another Blow to Illegal Streaming
International Operation KRATOS led by Europol dismantled illegal streaming networks, leading to 29 arrests and nine crime groups taken down.
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
DoJ disrupted 1.4M accounts and froze $3.8M in crypto as scam losses hit $7.2B in 2025, weakening fraud networks.
Magecart skimmer turns Stripe into a malware command server
Sansec found a Magecart family that runs its skimmer straight out of Stripe. The attacker stores the card stealer in a Stripe customer's metadata and runs it...
CISA directive for AI executive order to be released this week, Andersen says
https://cyberscoop.com/europol-piracy-streaming-crackdown-operation-kratos2/
https://www.bleepingcomputer.com/news/security/chinese-hackers-use-new-atlas-rat-malware-in-european-cyberattacks/
https://www.microsoft.com/en-us/security/blog/2026/05/22/microsoft-security-success-stories-how-st-lukes-and-manpowergroup-are-securing-ai-foundations/
Typosquatted npm packages used to steal cloud and CI/CD secrets | Microsoft Security Blog
The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations identify and disrupt related activity.
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Redis CVE-2026-23479 enables authenticated RCE; affecting versions since 7.2.0, patched May 5 to reduce exploitation risk.
https://thehackernews.com/2026/06/microsoft-365-android-apps-let-any-app.html
https://thehackernews.com/2026/06/google-doubleclick-abused-in-new.html
https://thehackernews.com/2026/06/whatsapp-slack-notifications-could.html
https://www.bleepingcomputer.com/news/security/cisa-warns-of-cyberattacks-targeting-fuel-tank-monitoring-systems/
https://cyberscoop.com/dhs-secretary-markwayne-mullin-pinpoints-optimal-cisa-staffing-levels/
https://www.bleepingcomputer.com/news/security/the-us-sanctions-nobitex-crypto-exchange-used-by-ransomware/
https://securityaffairs.com/193086/intelligence/cyber-espionage-campaign-targeted-stock-exchange-executives-outlook-account.html
Objective-See: Blog
Posts about macOS malware, exploits, and tools
https://www.bleepingcomputer.com/news/security/new-http-2-bomb-dos-attack-crashes-web-servers-in-under-a-minute/
We found this fake-invoice campaign while scammers were still building it | Malwarebytes
Invoices pretending to be from Amazon, PayPal, and others reveal how criminals use fear and phone calls to steal money and devices.
Objective-See: Blog
Posts about macOS malware, exploits, and tools
https://www.cybersecuritydive.com/news/ai-cybersecurity-hype-reality-check-gartner/821867/
CISA warns of active attacks exploiting Android, Linux bugs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system.
CISA, FBI warn that hackers are targeting systems used to monitor industrial fluids
Automatic tank gauge systems are widely used across multiple industries, including energy, agriculture and transportation.