Monthly Threat Report June 2026

- The Hornetsecurity monthly threat report summarizes May–June 2026 activity: Kali365 PhaaS is enabling large-scale device-code OAuth phishing (with observed IOCs), Anthropic’s Project Glasswing surfaced thousands of high/critical vulnerabilities creating a remediation backlog, CVE-2026-41089 (Windows Netlogon RCE, CVSS 9.8) is being actively exploited, NYC Health + Hospitals confirmed a 1.8M-person data breach including biometric data traced to a third-party vendor, and Foxconn reported a North American cyberattack with alleged 8TB exfiltration by the Nitrogen ransomware group; the report concludes with tactical recommendations (restrict device-code auth, urgent patching, vendor access audits, and SBOM/patching improvements).