> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
The Kids Internet and Digital Safety (KIDS) Act passed with bipartisan support by a 267-117 margin, winning the two-thirds majority needed to greenlight the legislation under a process that speeds up a bill’s path to a vote but requires more than a simple majority.
Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign
This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation.
The post ​​What’s new in Microsoft Security: June 2026 appeared first on Microsoft Security Blog.
MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it.
The post Securing AI agents: When AI tools move from reading to acting appeared first on Mi...
Hackers stole data from 4.38 million Aflac Japan customers after accessing its systems for 10 days before the breach was detected. Aflac Japan disclosed that hackers stole the personal information of 4.38 million customers and agents after gaining access to its systems between June 15 and June 25. A...
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner.
The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnerability in Langflow,...
A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information. [...]
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteHow's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build Why no HTTPS? We used the site to sham...
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction.
The cryptocurrency clipper activity has been codenamed Silent Swap by McAfee Labs.
"The camp...
Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware
The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing nerve center between government and private sector. The Alliance of National Councils for Homeland O...
libyang could be made to crash or run programs if it received specially crafted network traffic.
Several security issues were fixed in libssh2.
Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026
GD.pm could be made to run programs or overwrite files if it opened a specially crafted file.
Several security issues were fixed in HPLIP.
A new Apple update fixes a multitude of browser and browser related vulnerabilities which have been public knowledge for a while
The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades.
New research from Adversa AI, which is named the bypass GuardFall, found it works against ten of the eleven popular open-so...
Faire tourner Linux sur Mac avec container machine, le mode de l'outil Apple Container qui offre un environnement Linux persistant : un Ă©quivalent de WSL.
Le post container machine : un environnement Linux sur Mac, façon WSL a été publié sur IT-Connect.
Découvrez Apple Container, l'outil open source pour exécuter des conteneurs Linux sur macOS : installation, commandes, équivalent Compose et clients GUI.
Le post Apple Container : bien débuter avec les conteneurs macOS a été publié sur IT-Connect.