“GreatXML” Zero-Day Drops — BitLocker Bypass Grants SYSTEM Privileges on Any Windows Machine With Offline Scan History
Security researcher “Nightmare Eclipse” has released a zero-day exploit dubbed “GreatXML” that bypasses Microsoft’s BitLocker full-disk encryption and spawns a command prompt with SYSTEM privileges in Recovery Mode. The exploit…
ServiceNow Confirms API Flaw Exploited in the Wild — Unauthenticated Access Exposed Customer IT Data
ServiceNow has disclosed a security incident in which a misconfigured API endpoint was exploited, granting unauthenticated access to customer instance data. The anomalous activity began around June 2 and went…
ShinyHunters Exploit Oracle PeopleSoft Zero-Days in Mass Data Theft Campaign — 300+ Instances Across 100+ Organizations Compromised
The prolific ShinyHunters cybercrime group has launched a sweeping data theft and extortion campaign against Oracle PeopleSoft servers, claiming to have compromised more than 300 instances across over 100 organizations.…
Krebs Unmasks “The Gentlemen” Ransomware Boss — Russian National Alexander Yapaev Identified as Admin
Investigative journalist Brian Krebs, along with researchers from Check Point Software and Intel 471, has identified the administrator behind “The Gentlemen” ransomware-as-a-service (RaaS) operation as Alexander Andreevich Yapaev, a 36-year-old…
South Korea Fines Coupang $409 Million in Record-Breaking Data Breach Penalty — 33 Million Customer Records Exposed
South Korea’s Personal Information Protection Commission (PIPC) has dropped the hammer on e-commerce giant Coupang with a staggering 624.7 billion won (\$409 million) fine — the largest data breach penalty…
FIFA World Cup 2026 Fraud Campaigns Explode — FBI Warns of 19,000+ Fake Domains, Credential Harvesting, and Banking Malware
With the 2026 FIFA World Cup approaching, the FBI and cybersecurity researchers are warning of a massive surge in World Cup-themed fraud campaigns. Researchers have identified approximately 19,000 FIFA-themed domains…
CrowdStrike: China Behind 58% of State-Sponsored Cyber Attacks on US Tech — Hunting AI Secrets at Industrial Scale
A new CrowdStrike threat landscape report covering April 2025 through March 2026 reveals that China-linked threat actors are responsible for 58% of all state-sponsored cyberattacks targeting U.S. technology firms, with…
FBI-Led “Operation Saffron” Dismantles Criminal VPN Used by 25+ Ransomware Groups — Admin Arrested in Ukraine
An international law enforcement operation codenamed “Operation Saffron” (also referred to as “Operation Riptide”) has dismantled the “First VPN Service,” a criminal virtual private network explicitly designed to help ransomware…
RoguePlanet Zero-Day PoC Released — Microsoft Defender Race Condition Grants SYSTEM Privileges on Fully Patched Windows
On June 10, 2026, the anonymous security researcher known as Nightmare Eclipse (also Chaotic Eclipse / MSNightmare) publicly released a proof-of-concept exploit dubbed “RoguePlanet” targeting a previously unknown race condition…
Microsoft June 2026 Patch Tuesday Shatters Records With 206 Vulnerabilities — Critical Windows Kernel RCE Scores 9.8
Microsoft’s June 2026 Patch Tuesday has set a new record with 206 security vulnerabilities patched across its product ecosystem, surpassing any previous monthly release. Of these, 32 to 39 are…