Five Eyes Alliance Warns Frontier AI Models Will Transform Offensive Cyber Capabilities Within Months
Summary In a rare joint statement issued June 22–23, the Five Eyes intelligence alliance — the United States, United Kingdom, Canada, Australia, and New Zealand — warned that frontier AI…
Nintendo of America Hit by Data Breach After Hackers Compromise Third-Party Survey Platform
Summary Nintendo of America has confirmed a data breach originating from a cyberattack on TinyPulse, a third-party employee engagement and survey platform owned by WebMD Health Services. A threat actor…
Databricks Acquires Panther to Build the AI-Native Security Lakehouse
Summary Databricks has announced an agreement to acquire Panther, an AI-native Security Operations Center (SOC) platform, marking the company’s third cybersecurity acquisition following SiftD.ai and Antimatter. The deal was announced…
Cisco Acquires WideField Security to Supercharge Splunk’s Agentic SOC With Identity Intelligence
Summary Cisco has announced its intent to acquire WideField Security Inc., a startup specializing in identity lifecycle security, to bolster Splunk’s Agentic Security Operations Center (SOC) capabilities. The deal, expected…
Usbliter8 — Unpatchable BootROM Exploit Hits Millions of iPhones With A12 and A13 Chips
Summary Security researchers at Paradigm Shift have publicly disclosed “usbliter8,” a new unpatchable BootROM exploit affecting Apple’s A12 and A13 chips along with S4 and S5 SoCs. The exploit and…
Check Point VPN Zero-Day Exploited by Qilin Ransomware — CISA Issues Emergency Directive
Summary A critical zero-day authentication bypass vulnerability in Check Point VPN products, tracked as CVE-2026-50751 (CVSS 9.3), is under active exploitation by threat actors linked to the Qilin ransomware operation.…
North Korea Compromises Mastra AI Framework in Massive npm Supply Chain Attack
Summary Microsoft has attributed a sweeping supply chain attack on the Mastra AI npm ecosystem to North Korea’s Sapphire Sleet group (also tracked as BlueNoroff/UNC1069). Over 140 packages within the…
Censys Expands Into Security Operations — Bringing Internet Intelligence Directly Into SOC Workflows
Summary Censys announced on June 18 a major expansion into security operations, embedding its internet intelligence platform directly into SOC workflows through new integrations with leading SIEM, SOAR, and threat…
FBI Warns Cybercriminals Are Weaponizing Traffic Distribution Systems to Deliver Ransomware and Phishing
Summary The FBI has issued a Public Service Announcement (I-061826-PSA) on June 18 warning that cybercriminals are increasingly exploiting Traffic Distribution Systems (TDS) to funnel victims toward ransomware, phishing pages,…
GreatXML Zero-Day Bypasses Windows BitLocker Encryption Without Recovery Key — No Patch Available
Summary Prolific exploit researcher Nightmare Eclipse (also known as Chaotic Eclipse) has publicly released “GreatXML,” a zero-day exploit that bypasses Windows BitLocker encryption by abusing the trust boundary between the…