Key TakeawaysInfection Timeline: Musashino University's systems were infected with ransomware shortly after 8:30 p.m. on June 15, 2026, with staff discovering it on June 16.No…
Key TakeawaysAttack Chain: BumbleBee malware led to Akira ransomware deployment via a Bing SEO poisoning attack.Initial Lure: A trojanized ManageEngine OpManager MSI was served from…
Key TakeawaysOutage Confirmed: Boeing said on Tuesday that an unplanned IT outage affected some of its computer systems and applications.Production Hit: Reports said the outage…
Key TakeawaysAttack Technique: Threat actors poison MCP tool descriptions to redirect AI agents into unauthorized actions.Agent Redirection: Microsoft showed how an agent can exfiltrate data…
Key TakeawaysSurfshark 2025 Impact Report: Covers sustainability, security, governance, and digital rights initiatives completed during 2025.Environmental and social initiatives: Renewable energy, tree planting, Emergency VPN…
Key TakeawaysNew Variant: The Gentlemen was seen using a new C-based ransomware variant alongside the primary Go-based one.Top Ranking: The group ranked among the top…
Key TakeawaysFlaws Identified: Three vulnerabilities affect Daktronics VFC-DMP-5000, DMP-5000, and DMP-8000 controllers.CISA Advisory: The flaws are documented in advisory ICSA-26-176-04 and include arbitrary file upload…
Key TakeawaysFiles Leaked: World Leaks posted more than 200,000 files stolen from Apple supplier Tata Electronics on the dark web.Suppliers Mapped: At least six documents…
Key TakeawaysBreach Confirmed: Nissan Americas disclosed an employee data breach tied to Oracle PeopleSoft zero-day attacks linked to ShinyHunters.Vulnerability Exploited: Threat actors exploited CVE-2026-35273 between…
Key TakeawaysExtension Spoofed: A malicious Chromium extension named "Search for perplexity ai" impersonated Perplexity AI.Method Used: It abused MV3 and declarativeNetRequest (DNR) APIs to intercept…
Key TakeawaysExtensions Removed: Microsoft pulled 100+ malicious Edge browser extensions tied to the StegoAd campaign.Hidden Payloads: The extensions concealed malware inside image and font files…
Key TakeawaysTarget Confirmed: India’s Meerut Development Authority (MDA) website was defaced by unidentified hackers.Content Displayed: The homepage was replaced with a black screen showing pro-Pakistan…
Key TakeawaysCampaign Confirmed: ShinyHunters targeted Sysco in a June 2026 "pay or leak" extortion campaign.Data Exposed: The published dataset contained approximately 2.7 million unique email…
QUICK ANSWERNo, Mullvad doesn't keep logs that can identify your online activity. After reviewing its privacy policy, every independent audit, and even the 2023 police…
This week underscored a shift in cybersecurity priorities. Authorities pursued the services, infrastructure, and financial channels supporting cybercrime, while regulators introduced new safeguards for emergency…
Key TakeawaysBreach Confirmed: ShinyHunters targeted American Tower in a June 2026 "pay or leak" extortion campaign.Data Exposed: The leaked dataset contained more than 215,000 unique…
Key TakeawaysExclusive Target: Throughout 2025, Gamaredon focused solely on Ukrainian governmental and military institutions, a new report says.New Tools: ESET Research documented six new PowerShell…
Key TakeawaysSoftware Deployed: TD Bank told some staff that it will use WorkiQ software to track time spent on browsers and internal communication applications.Weak Protections:…
Key TakeawaysBreach Confirmed: Polymarket said a third-party vendor compromise injected malicious code into its website for some users.Funds Stolen: Blockchain monitoring firm PeckShield reported that…
Key TakeawaysExtension Identified: Adblock for YouTube, a Chrome extension with more than 10 million installs, was flagged for hidden risk.Threat Type: Researchers found dormant JavaScript…
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
