UNC1151 Gmail Phishing Campaign Targets 2FA Credentials
The UNC1151 Gmail phishing campaign has emerged as a cyber threat targeting Polish internet users, with attackers now focusing on Gmail accounts and deploying phishing…
Month: June 2026
Security leaders say lift export controls for Anthropic’s Mythos-class models
Security industry heavyweights have published an open letter to the United States Department of Commerce, asking it to lift the suddenly imposed export controls on…
Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure
Over two dozen fintech and technology organizations have formed a coalition to secure open source software (OSS) from accelerated, AI-driven exploitation. Named Athena, it has…
U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 16, 2026 U.S. Cybersecurity and Infrastructure…
EvilTokens: A phishing attack that doesn’t steal your password
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages 15 Jun 2026 • …
Hong Kong watchdog launches data privacy academy to develop top talent in sector
Hong Kong’s privacy watchdog has launched a data privacy academy as part of efforts to align with the national strategy of developing the city into…
Willis report finds cyber insurance covers most average breach and first-party losses
More than 95% of average data breach losses and 90% of average first-party losses are adequately covered by insurance, according to a new report by…
Sovereign cloud won’t fix your AI risk. Identity governance will
US enterprises are not far behind. The SEC’s cybersecurity disclosure rules, CISA’s AI security guidance, proposed state-level AI regulations and growing board-level scrutiny of AI…
Securing Jenkins: Top Attack Flows & Misconfigurations
Jenkins is an open-source automation server widely used for CI/CD orchestration, pipeline automation, and infrastructure workflows. It integrates deeply with source control systems, container registries,…
iRhythm discloses data breach, says hackers stole patient info
Digital healthcare company iRhythm Holdings has disclosed a data breach after hackers stole patients’ personal and health information stored on third-party-hosted business applications. The company…
OptinMonster Plugin Hack Exposes 1.2 Million WordPress Sites to Cyberattack
A large-scale supply chain attack targeting widely used WordPress plugins has exposed more than 1.2 million websites to potential compromise after attackers injected malicious code…
Russian and Chinese Actors Use AI Translation and Visual Content in Malign Influence Operations
AI is reshaping foreign malign influence operations in subtle but consequential ways. Our analysis of pro-Russia and pro-China inauthentic accounts on X across 2024–2026 shows…