IT Security News Daily Summary 2026-06-16

157 posts were published in the last hour

• 20:34 : Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society
• 20:34 : Python dev saved from disaster by intuition…and AI
• 20:9 : AI is Not Solving Cybersecurity Burnout Yet, New ISSA and Omdia Research Warns
• 20:9 : Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
• 19:32 : iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded
• 19:7 : ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
• 19:5 : IT Security News Hourly Summary 2026-06-16 21h : 9 posts
• 18:38 : Bug in FIFA World Cup internal system gave anyone ability to modify TV stream
• 18:38 : Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks
• 18:38 : The Half-Life of Threat Intelligence: When Does an IOC Stop Being Useful?
• 18:38 : Three critical Fortinet sandbox bugs splattered by unknown attackers
• 18:8 : Best Prime Day Tech Deals: Apple, Bose, Garmin, and More
• 18:8 : Cloud security metrics and KPIs: A CISO’s guide
• 18:8 : Infinite Campus Incident Exposes Data From 137,000 School Staff Accounts
• 18:7 : ‘Dangerous’ AI Models Are Coming No Matter What
• 18:7 : Threat tactic spotlight: Subdomain takeover
• 17:34 : The Trust Problem in Modern SaaS: Why Your Authentication Succeeded, and You Still Got Breached
• 17:9 : How to Govern Agentic AI in the Enterprise
• 16:34 : PSA: Supply Chain Compromise Targets ShapedPlugin, Backdoored Pro Plugins Distributed via Official Channels
• 16:34 : Amos Stealer Targets macOS Keychain Files and Browser Passwords
• 16:34 : Rockwell Automation CompactLogix
• 16:34 : Rockwell Automation FactoryTalk Analytics PavilionX
• 16:34 : Rockwell Automation FLEX I/O EtherNet/IP Adapters
• 16:34 : Rockwell Automation RSLinx
• 16:34 : Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
• 16:11 : Crypto Exploit Losses Plummet 90% in May to $68.3 Million as Thieves Hit Security Wall
• 16:5 : IT Security News Hourly Summary 2026-06-16 18h : 12 posts
• 15:37 : Check Point and Illumio Expand Partnership to Secure Hybrid Environments
• 15:37 : AI vs Traditional Penetration Testing: Tooling and Outcomes
• 15:37 : Microsoft 365 Device Code Phishing Campaign Bypasses Password Theft With Legitimate Login Flow
• 15:37 : India Temporarily Bans Telegram Messenger Over Medical Exam Fraud
• 15:37 : iRhythm Confirms Data Stolen in Hack
• 15:37 : Attackers are exploiting FortiSandbox vulnerabilities
• 15:37 : AI adoption correlates with incident frequency, underscoring need for governance
• 15:10 : Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
• 15:10 : ShinyHunters Claims Council of Europe HR Data, Threatens Leak
• 15:9 : Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic
• 15:9 : China-Linked Cyber Espionage Group Secretly Harvested Research and Defense Emails from North American Institutions
• 15:9 : Ransomware Gang Apologizes After Mistakenly Attacking CIS Company and Revealing Criminal Errors
• 14:35 : Threat Alert: New “Rokarolla” Android Malware Enables Full Device Takeover
• 14:35 : How Your Online Activity Is Training AI Behind the Scenes
• 14:35 : Fortinet Warned as Three Critical FortiSandbox Bugs Come Under Attack
• 14:35 : Hacker Conversations: Isira Adithya, the Evolution of an Ethical Hacker
• 14:35 : Cybercriminals mask malicious communications through Microsoft Teams relays
• 14:35 : SprySOCKS Backdoor Expands From Linux to Windows
• 14:35 : Cyber Briefing: 2026.06.16
• 14:5 : Magnitude Emerges From Stealth Mode With $10 Million in Funding
• 14:5 : SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)
• 14:4 : TekStream launches Proactive Cyber Defense to counter AI-driven threats
• 14:4 : New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
• 13:34 : Silent Ransom Group Targets US Legal Firms With Voice Phishing and Data Theft Extortion
• 13:34 : “Free World Cup stream” sites are serving scams, not football
• 13:34 : AI and Cybersecurity – Everything You Wanted to Know, But Were Afraid to Ask
• 13:34 : AppViewX extends machine identity security to ai agents and post-quantum environments
• 13:34 : Rokarolla Trojan Combines Banking Fraud With Device Surveillance
• 13:8 : Crypto’s Biggest Unresolved Risk Is Not Theft Of Assets, It’s The Collapse Of Identity Certainty In Financial Transactions
• 13:8 : New Rokarolla Android Trojan Found Targeting 217 Crypto and Banking Apps
• 13:8 : AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era
• 13:8 : Hackers Exploit Critical Fortinet FortiSandbox Flaws in Active Attacks
• 13:8 : Novo Nordisk Confirms Cyber Attack — Hackers Accessed Patient Medical Data and Internal AI Assets
• 13:7 : Interlock and Rhysida Ransomware Operations Share Supper Backdoor and Malware Codebase
• 13:7 : Cardiac patients’ medical data stolen and held to ransom
• 13:7 : Cybercrime Group Claims Novo Nordisk Hack
• 13:7 : Endpoint Security Startup Ent Emerges From Stealth With $100 Million Seed Round
• 13:7 : Radware AI Xploit Shield delivers virtual patching for newly identified application and API flaws
• 13:7 : Teleport adds LLM Proxy and Delegated Identity to secure AI agent actions and access
• 13:7 : DragonForce abuses Microsoft Teams relays
• 13:7 : Three Healthcare Orgs Report Data Breaches
• 13:7 : Headless ERP concept gaining traction among enterprises
• 13:7 : US, France seize deepfake sites; operators arrested
• 13:6 : Hunting Infostealers with AI in Large-Scale SOCs
• 13:5 : IT Security News Hourly Summary 2026-06-16 15h : 13 posts
• 12:34 : Novo Nordisk Confirms Cyberattack Exposing Patient Medical Data and Internal AI Assets
• 12:34 : Hackers Use OnionDrop Loader With DLL Sideloading to Deploy Multiple Infostealers
• 12:34 : Microsoft Teams Relay Abused by Hackers to Hide Malicious Traffic
• 12:34 : Can CISOs Trust Their Applications? TrustCloud Wants to Replace the Questionnaire
• 12:7 : Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection
• 12:7 : India orders temporary ban on Telegram over exam fraud concerns
• 12:7 : Microsoft Teams Analyze the Wi-Fi Hotspot Data Connected to an Employee’s Device
• 12:7 : Russian and Chinese Influence Actors Use AI to Evade Bot Detection and Mimic Human Behavior
• 12:7 : Cardiac monitor maker’s security skips a beat as data thieves go for the jugular
• 12:7 : White House Issues Memo to Bolster NSS Cybersecurity
• 12:7 : Cal Water Investigating Iranian Hackers’ Claims
• 12:7 : Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
• 12:6 : Over Two-Thirds of Security Pros Say Cyber Is Getting Harder
• 11:34 : Infinite Campus Breach Leaks Personal Information of 137,000 Users
• 11:34 : CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation
• 11:34 : Flock Cameras Are Being Used for Stalking
• 11:34 : DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company
• 11:34 : UK to Ban Under-16s From TikTok, Instagram, YouTube, and Other Social Media Platforms
• 11:9 : Best of Android Fax Apps: Top 5 Secure Picks for 2026
• 11:9 : Hackers Abuse Compromised WordPress Sites to Deliver GULoader Through EtherHiding Chain
• 11:9 : Infinite Campus Data Breach Exposes 137,000 Users Personal Details
• 11:9 : PRC-Nexus Hackers Exploit REDCap Servers to Spy on US Medical Research Institutions
• 11:9 : Deepfake posting sites depicting famous women taken down by feds
• 11:9 : Atomic Arch Supply Chain Attack Hits 1,500 AUR Packages
• 11:9 : China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
• 11:9 : Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
• 11:9 : Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats
• 10:32 : Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
• 10:32 : Ghostwriter APT Uses Fake Gmail Login Panels to Steal Passwords and 2FA Codes
• 10:32 : Cybersecurity Executives Urge the Trump Administration to Ease Restrictions on Anthropic AI Models
• 10:32 : Crypto scammers are sending couriers to victims’ homes to collect cash
• 10:31 : Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)
• 10:6 : Reverse Shell Explained: Setup, Attack Chain, and Detection
• 10:6 : Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure
• 10:5 : IT Security News Hourly Summary 2026-06-16 12h : 4 posts
• 9:34 : Hackers Abuse Microsoft OAuth Device Code Flow to Take Over Microsoft 365 Accounts
• 9:34 : U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog
• 9:34 : Software supply chains are heading for a transparency test
• 9:9 : Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
• 8:34 : LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now
• 8:34 : Zhipu AI Sees Stock Price Jump Amid Anthropic Disruption
• 8:34 : OptinMonster Plugin Vulnerability Exposes 1.2 Million WordPress Sites to Cyberattacks
• 8:34 : China-linked actor spent two years inside medical research networks
• 8:34 : Planning a trip? Fake travel sites are multiplying this summer
• 8:34 : Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
• 8:34 : FBI Warns Courier Cash Pickups Are Driving Crypto Scams
• 8:6 : Judge Dismisses xAI Trade Secrets Claim Against OpenAI
• 8:6 : Ransomware Ecosystem Consolidates Around LockBit Alumni, Qilin, Hyflock, and The Gentlemen
• 8:6 : OptinMonster Plugin Hack Exposes 1.2 Million WordPress Sites to Cyberattack
• 7:34 : From a VHDX File to a Remcos RAT, (Tue, Jun 16th)
• 7:34 : UK Government Plans Youth Social Media Ban For Next Year
• 7:34 : Anthropic Meets With Officials After Fable 5 Suspension
• 7:34 : Guernsey Returns £8m To OneCoin Victims
• 7:34 : Police To Deploy Facial Recognition In Peterborough
• 7:34 : Anthropic models defended, FBI shuts down massive phishing service, 1Password acquires Apono
• 7:5 : Rhysida and Interlock Ransomware Groups Linked to Initial Access Brokers and Crypter Ecosystem
• 7:5 : IT Security News Hourly Summary 2026-06-16 09h : 13 posts
• 7:5 : Cisco SD-WAN vManage Vulnerability Exploited in Zero-Day Attacks
• 7:4 : LiteSpeed cPanel Plugin 0-Day Vulnerability Actively Exploited in the Wild
• 7:4 : Hackers Abuse Legitimate RMM Tools in The Quarry IRS and SSA Phishing Campaigns
• 7:4 : GitHub releases an open dataset for multilingual developer content
• 6:34 : Russian and Chinese Actors Use AI Translation and Visual Content in Malign Influence Operations
• 6:34 : CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
• 6:34 : Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw
• 6:34 : Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks
• 6:34 : Reachability makes AI threat modeling worth the trust
• 6:7 : Unveiling ErrTraffic: inside a growing ClickFix malware distribution framework
• 6:7 : PRC-Nexus Hackers Abuse REDCap Servers to Monitor US Medical Research Organizations
• 6:7 : The Gentlemen RaaS Scales to 166 Victims as Ransomware Groups Compete for Affiliates
• 6:7 : EU Cybersecurity Act 2.0: When good regulation goes bad
• 5:34 : Microsoft Website Displays Security Warning After Certificate Expiry
• 5:34 : Hackers Use The Quarry PhaaS Ecosystem to Target U.S. Victims With IRS Phishing
• 5:34 : The rise of machine identities and agentic AI: Securing trust in the next era of digital autonomy
• 5:12 : Microsoft 365 Copilot Vulnerability Exposes Sensitive Data Through One-Click Attack
• 5:12 : EvilTokens: A phishing attack that doesn’t steal your password
• 5:12 : A $2 trillion revenue shift hinges on AI data governance
• 4:35 : Cybersecurity jobs available right now: June 16, 2026
• 2:10 : ISC Stormcast For Tuesday, June 16th, 2026 https://isc.sans.edu/podcastdetail/9974, (Tue, Jun 16th)
• 1:38 : Nearly 14,000 SimpleHelp Servers Exposed Amid Critical Authentication Bypass Disclosure
• 23:35 : Inside the Modern SOC: The 72-Minute Race
• 22:36 : Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom
• 22:13 : The US government’s Anthropic models ban was never about an AI jailbreak
• 22:13 : Cisco SD-WAN make-me-root bug under attack
• 22:5 : IT Security News Hourly Summary 2026-06-16 00h : 4 posts
• 21:55 : IT Security News Daily Summary 2026-06-15