Cybersecurity June 2026
Global headlines curated by our intelligent agents.
Latest News
US offers $10 million to identify hackers targeting Signal and WhatsApp users
The US has announced a $10 million bounty for information that may help identify or locate members of two Russian state-backed hacking groups.
AI browsers were tricked into revealing passwords with a shockingly simple approach
LayerX found that AI browsers could be fooled by a fake game-like prompt called BioShocking, and some vendors haven't fixed it.
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
XLab says the two-stage botnet abuses weak Telnet/SSH logins, exposed ADB, and old flaws while shifting its core to Rust.
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
CVE-2026-33017 lets attackers abuse an unauthenticated Langflow API endpoint, run Lambsys, and spread via reused SSH keys.
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
McAfee says the campaign uses unsigned .NET and Golang installers, EtherHiding C2, and silent Chromium extension injection to swap wallet addresses.
Apple is delivering security updates faster to beat AI hackers
AI is now helping hackers find and exploit security issues faster than ever before. Apple says it will no longer wait to include updates in the next scheduled releases of iOS, iPadOS, and macOS.
Three AirDrop vulnerabilities discovered, with Apple working on a full fix
Three AirDrop vulnerabilities have been discovered by security researchers, affecting both iPhone and Mac, with similar ones found in Android’s...
Huge Apple leak continues with new images of iPhone 18 Pro colors, smaller Dynamic Island, and more
A massive Tata Electronics data breach reveals the iPhone 18 Pro's new Cherry Red color, smaller Dynamic Island, and internal schematics.
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
Attackers exploited SimpleHelp CVE-2026-48558 to deliver TaskWeaver and Djinn Stealer, targeting credentials across cloud, code, AI, and wallet tools.
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
CVE-2026-8037 in Progress Kemp LoadMaster allows pre-auth root command execution via API; patches are available and a public PoC is out.
Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs
Apple ships iOS 26.5.2, macOS Tahoe 26.5.2, Safari 26.5.2 patching 30+ flaws, including AI-discovered WebKit CVEs and kernel bugs; no active exploitat
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
Oracle E-Business Suite vulnerability CVE-2026-46817 (CVSS 9.8) is being actively exploited in the wild despite Oracle’s recent patch release.
Apple accelerates security updates in response to AI-powered hacking risks
Today’s iOS, iPadOS, and macOS updates include security fixes that Apple had originally planned to release with version 26.6. Here’s why.
Apple Released iOS 26.5.2 Security Fixes Early to Thwart AI-Assisted Hacks
Apple today released iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 with a long list of security fixes that it initially introduced in the iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6 betas. Apple told Reuters that it released the updates earlier than planned due to concerns about AI-assisted hacks.
Leaked iPhone 18 Pro photos reportedly wound up on the dark web
Apple is reportedly “concerned” about the files appearing on the dark web.
iOS 26.5.2 Patches More Than 25 Security Vulnerabilities
Apple's newly released iOS 26.5.2, iPadOS 26.5.2, and macOS 26.5.2 updates address more than 25 security vulnerabilities, which means you should install the updates as soon as possible. According to Apple's security support documents for the updates, the new software has vulnerability fixes that Apple previously made available in the iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6 betas.
Photos of iPhone 18 Pro drop tests and other sensitive info hits the dark web
Last week, it transpired that Apple supplier Tata Electronics had been the subject of a data breach, with hundreds of...
Apple 'Concerned' Over iPhone 18 Pro Data Leak From Supplier Tata
Apple is "concerned" about a recent data leak from Tata Electronics, one of its manufacturing partners in India, reports Reuters. Tata Electronics was the target of a cyberattack, with confidential Apple documents stolen and shared on the dark web. Hackers were able to steal information about the iPhone 18 Pro and iPhone 18 Pro Max, including a list of suppliers, parts, and images of the devices.
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
Acronis says Mustang Panda used Zoho WorkDrive for C2 and data theft in campaigns against Indian government and hydropower targets.
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
Weekly cybersecurity recap covers DirtyClone, PTC exploits, Gaslight malware, Turla, Operation Endgame, AI risks, and urgent CVEs.
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
Infoblox found 236,493 DCloud Uni-App domains powering crypto scams, WhatsApp phishing, fake gambling sites, and wallet drainers.
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
Gamaredon ran 35 spear-phishing campaigns against Ukraine in 2025, using new PowerShell tools, HTML smuggling, and CVE-2025-8088.
Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts
Microsoft removed 119 StegoAd Edge extensions that hid payloads in image and font files to steal credentials and run ad fraud.
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public PoC for CVE-2026-55200 exposes a critical libssh2 flaw that can let a malicious SSH server corrupt client memory.