LastPass Confirms Data Breach in Klue Supply Chain Attack 2026-06-23 True True Data Exposure Flaws in Dify AI Platform Put 1 Million+ App Tenants at Risk 2026-06-23 True True FortiBleed: Russian IAB Harvested 110 Million Credentials from 430,000 FortiGate Firewalls 2026-06-23 True True Scope of Salesforce Attacks Expands as Icarus Leaks Stolen Data 2026-06-23 True True Russian Initial Access Broker Behind FortiBleed Campaign 2026-06-23 True True 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests 2026-06-23 True True GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns 2026-06-23 True True New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer 2026-06-23 True True WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool 2026-06-23 True True Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks 2026-06-23 True True FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist 2026-06-23 True True CVE-2025-67038: Lantronix EDS5000 OS Command Injection Vulnerability 2026-06-23 True True CVE-2026-11374: ManageEngine SSO Ticket Prediction Enables Unauthenticated Account Takeover 2026-06-23 True True FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder 2026-06-22 True True WhatsApp Phishing Attack Uses Fake Business Docs to Hack PCs 2026-06-22 True True Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More 2026-06-22 True True INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific 2026-06-22 True True What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks 2026-06-22 True True A Record-Breaking Patch Tuesday for June 2026 2026-06-22 True True Microsoft Fixes AutoGen Studio Flaw That Enabled Code Execution 2026-06-22 True True Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants 2026-06-22 True True New Exploit Bypasses Apple's Boot Defenses, Affects Millions of iPhones 2026-06-22 True True ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack 2026-06-22 True True FortiBleed Campaign Used Custom FortiGate Sniffer to Steal Credentials 2026-06-22 True True JaredFromSubway MEV Bot Hacked in $15 Million Crypto Theft 2026-06-22 True True Texas Parks & Wildlife Data Breach Affects 3 Million Individuals 2026-06-22 True True A Glimpse into the 'Search Your Target' Market for Stolen Credentials 2026-06-22 True True AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network 2026-06-22 True True AryStinger Botnet Infected Thousands of D-Link Routers Worldwide 2026-06-21 True True Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys 2026-06-21 True True In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum 2026-06-21 True True China-Nexus Actor Spies on US Researchers Undetected for a Year 2026-06-21 True True Google Exposes China Espionage Group UNC6508 Lurking in Networks Since 2023 2026-06-21 True True Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data 2026-06-19 True True AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution 2026-06-19 True True CryptoBandits Malware Doubles as a Backdoor, Abuses Tor for Stealthy C2 2026-06-19 True True Klue OAuth Breach Victim List Grows as Icarus Hackers Claim Attack 2026-06-19 True True CVE-2026-7515: BetterDocs Pro WordPress Plugin — Unauthenticated Local File Inclusion 2026-06-19 True True Forget Data Leakage: Shadow AI's Real Threat Is Access Control 2026-06-19 True True Cybersecurity Firms Impacted by Klue Supply Chain Attack 2026-06-19 True True Texas Govt Data Breach Exposes Over 3 Million Driver's Licenses 2026-06-19 True True CISA Warns Fortinet Users to Secure Devices After FortiBleed Credential Leak 2026-06-19 True True 15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown 2026-06-19 True True Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2 2026-06-19 True True CVE-2026-54414: FileRise Path Traversal Enables Arbitrary File Write and Admin Takeover 2026-06-19 True True Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites 2026-06-19 True True The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes 2026-06-19 True True Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure 2026-06-19 True True Klue OAuth Breach Linked to 'Icarus' Salesforce Data Theft Attacks 2026-06-18 True True ShapedPlugin Update Flow Hacked to Infect WordPress Sites 2026-06-18 True True 
