Cybersecurity, AI, etc.
Summary A critical zero-day authentication bypass vulnerability in Check Point VPN products, tracked as CVE-2026-50751 (CVSS 9.3), is under active exploitation by threat actors linked to the Qilin ransomware operation.…
Summary Microsoft has attributed a sweeping supply chain attack on the Mastra AI npm ecosystem to North Korea’s Sapphire Sleet group (also tracked as BlueNoroff/UNC1069). Over 140 packages within the…
Summary Censys announced on June 18 a major expansion into security operations, embedding its internet intelligence platform directly into SOC workflows through new integrations with leading SIEM, SOAR, and threat…
Summary The FBI has issued a Public Service Announcement (I-061826-PSA) on June 18 warning that cybercriminals are increasingly exploiting Traffic Distribution Systems (TDS) to funnel victims toward ransomware, phishing pages,…
Summary Prolific exploit researcher Nightmare Eclipse (also known as Chaotic Eclipse) has publicly released “GreatXML,” a zero-day exploit that bypasses Windows BitLocker encryption by abusing the trust boundary between the…
Summary The 2026 SANS State of Detection Engineering Report, developed in partnership with Anvilogic, paints a sobering picture of the defensive security profession. Based on a survey of over 300…
Summary Researchers at OALABS (Open Analysis) have published a damning report detailing how a low-skilled attacker successfully breached at least 14 companies using Anthropic’s Claude Code and OpenAI’s Codex as…
Summary A critical vulnerability in Splunk Enterprise (CVE-2026-20253) with a perfect CVSS score of 9.8 is now being actively exploited in the wild, just days after its disclosure on June…
Summary A pair of newly disclosed HTTP/2 denial-of-service vulnerabilities dubbed the “HTTP/2 Bomb” are sending shockwaves through the web infrastructure community. CVE-2026-49975 affects the default HTTP/2 configurations of Apache HTTP…
Summary The ShinyHunters extortion group has claimed responsibility for breaching Madison Square Garden (MSG), exfiltrating 45 GB of corporate and customer data including 26 million customer records, customer support email…