Critical Splunk Enterprise Flaw Exposes Pre-Auth File Write and RCE Path
Summary Splunk has patched a critical flaw in Splunk Enterprise, tracked as CVE-2026-20253, that allows an unauthenticated network-reachable attacker to create or truncate arbitrary files through a PostgreSQL sidecar endpoint.…
Anthropic Launches Claude Fable 5 and Mythos 5 — First “Mythos-Class” AI Models Go Live With Controversial Cybersecurity Guardrails
Summary Anthropic has officially launched Claude Fable 5, the first publicly available model from its new “Mythos” capability class, with general availability confirmed on June 11, 2026. The model delivers…
Google Releases DiffusionGemma — Open 26B Model That Generates Text 4x Faster Using Diffusion Instead of Autoregression
Summary Google has released DiffusionGemma, an experimental open model that takes a fundamentally different approach to text generation. Instead of the traditional autoregressive method (generating one token at a time),…
OpenAI Makes GPT-5.5 Instant the Default ChatGPT Model — Plus GPT-5.4 Thinking With Integrated Codex
Summary OpenAI has rolled out GPT-5.5 Instant as the new default model for ChatGPT on June 12, 2026, replacing GPT-5.3 Instant. The update promises improved accuracy, clarity, conciseness, image understanding,…
VRChat Data Breach Exposes 2.4 Million User Accounts — Emails, Usernames, and Login History Compromised
Summary VRChat has disclosed a data breach affecting approximately 2.4 million user accounts in the United States. The company discovered unauthorized access to data stored in its cloud environment in…
Novo Nordisk Discloses Cybersecurity Breach — Clinical Trial Patient Data Exfiltrated From Internal Systems
Summary Danish pharmaceutical giant Novo Nordisk has disclosed a cybersecurity breach affecting patient data from some of its clinical trials. The company revealed on June 11, 2026, that attackers gained…
Ivanti Sentry Zero-Day Hits CVSS 10.0 — Exploited Within 24 Hours of PoC Release, CISA Orders Emergency Patch
Summary CISA has added CVE-2026-10520 — a maximum-severity (CVSS 10.0) OS command injection vulnerability in Ivanti Sentry — to its Known Exploited Vulnerabilities catalog, ordering federal agencies to patch by…
Europol Dismantles AudiA6 — Crypto Laundering Service That Washed €336 Million for Ransomware Gangs
Summary Europol has announced the takedown of “AudiA6,” a professional cryptocurrency laundering operation that processed over €336 million in illicit profits for ransomware gangs and cybercriminal networks between 2022 and…
INTERPOL and Algerian Authorities Dismantle SniperDz — Nine-Year Phishing-as-a-Service Empire That Targeted 30+ Global Organizations
A joint operation led by Group-IB, INTERPOL, and Algerian authorities has dismantled “SniperDz,” a Phishing-as-a-Service (PhaaS) platform that operated for nine years while providing sophisticated phishing kits targeting over 30…
Anthropic CEO Dario Amodei Calls for FAA-Style Regulation of Powerful AI Models — Releases Dual Policy Roadmaps
Anthropic CEO Dario Amodei published a detailed essay on June 10 titled “Policy on the AI Exponential,” arguing that the most powerful AI models need government oversight modeled after the…