DentaQuest Data Breach Exposes 2.6 Million Accounts — ShinyHunters Leak 234GB of Sensitive Health Data
Summary Dental benefits administrator DentaQuest has confirmed a data breach that exposed the sensitive information of 2.6 million accounts after the ShinyHunters extortion group publicly leaked 234GB of stolen data.…
Cisco SD-WAN Zero-Day (CVE-2026-20245) Actively Exploited in the Wild — No Patch Available
Summary Cisco has disclosed a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager (formerly vManage) that is being actively exploited by attackers. Tracked as CVE-2026-20245, the flaw allows authenticated attackers…
Dashlane Confirms Brute-Force Attack — Hackers Downloaded Encrypted Password Vaults
Summary Password manager Dashlane disclosed on June 5, 2026, that attackers successfully downloaded encrypted vaults from a small number of user accounts following a brute-force attack that began on May…
Cisco Warns of Critical Unified Communications Manager Flaw With Public PoC Exploit (CVE-2026-20230)
Cisco has disclosed a high-severity server-side request forgery (SSRF) vulnerability in Unified Communications Manager (Unified CM) and Unified CM Session Management Edition that can be escalated to root-level privilege. Tracked…
Alphabet Raises $85 Billion in Largest Equity Offering in History to Fund AI Infrastructure
Alphabet, Google’s parent company, has completed the largest equity fundraising in history at approximately $85 billion — an increase from the initially announced $80 billion target. The massive capital raise,…
Fake Context Alignment Attack Lets Hackers Hijack Google Gemini Through WhatsApp and Slack Notifications
SafeBreach Labs has disclosed a new class of indirect prompt injection attack against Google Gemini voice assistant on Android, demonstrating how malicious instructions hidden in messaging notifications can take control…
Google Releases Gemma 4 12B — Encoder-Free Multimodal AI That Runs on a Laptop
Google DeepMind has released Gemma 4 12B, a new open-weight multimodal model with a fundamentally different architecture. Released on June 3, 2026 under the Apache 2.0 license, it’s the first…
VS Code Zero-Day Allowed One-Click GitHub Token Theft via Malicious Jupyter Notebooks
Security researcher Ammar Askar disclosed a critical vulnerability in Visual Studio Code that allowed attackers to steal GitHub access tokens with a single click. The flaw primarily targeted github.dev, the…
HTTP/2 Bomb Exploit (CVE-2026-49975) Can Crash Web Servers in Seconds — Over 880,000 Sites at Risk
A devastating new denial-of-service vulnerability dubbed the “HTTP/2 Bomb” has been publicly disclosed, and it is remarkably effective. Tracked as CVE-2026-49975, the exploit can crash web servers running default HTTP/2…
Microsoft Defender Zero-Days Under Active Exploitation — ‘Nightmare Eclipse’ Saga Escalates With CISA KEV Additions and Legal Threats
Three Microsoft Windows Defender zero-day vulnerabilities disclosed by a security researcher operating under the alias “Nightmare Eclipse” are now under active exploitation, with CISA adding all three to its Known…