Five Compliance Realities Federal Contractors Can’t Ignore
Picture this: you’re three weeks out from a contract renewal. A prime contractor emails asking for proof of CMMC readiness. Your security team scrambles. The…
Month: June 2026
GlassWorm Uses Blockchain-Based C2 and Invisible Unicode to Steal Developer Secrets
A trio of coordinated campaigns a JetBrains fake AI assistant campaign, the GlassWorm self‑propagating worm, and the compromised Nx Console Visual Studio Code extension made…
Encrypted DNS still tells an eavesdropper where to look
Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a…
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS. “The Windows variants discovered are…
Wimbledon’s ‘hidden court 19’ uses IBM Bob to complete 10 years’ work in months
IBM has harnessed artificial intelligence (AI) to convert feedback from tennis fans into the latest digital services that sit behind the upcoming grand slam at…
Suncorp to have AI agents in insurance claims process as soon as this month
Suncorp will have five AI agents handling various tasks or “sub-processes” in insurance claim processing as soon as the end of this month. Kranthi Nekkalapu.…
GitHub Actions Security Pt 1: Attacks & Defenses
The tj-actions compromise hit 22,000 repositories. Ultralytics had cryptominers injected into PyPI releases. Trivy’s supply chain was breached through a workflow the authors believed was…
The Shadow AI Paradox: Governing Innovation At Machine Speed
“Shadow AI” is more than likely living within your organization. Often unseen by IT, it’s a threat to intellectual property; it could propagate bias, make…
The systemd 261 release brings a software TPM, new OS installer
Linux distributions that ship systemd as their init system now have a new version to track. The systemd 261 update adds a cloud metadata subsystem,…
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
Ravie LakshmananJun 17, 2026Vulnerability / Supply Chain Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget…
Trump no longer views Anthropic as national security threat
US President Donald Trump said he might have viewed artificial intelligence company Anthropic as a national security threat last week, but he no longer does,…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 102
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter OptinMonster supply chain attack…