The FBI has repeated calls urging members of the public not to fall for cryptocurrency investment schemes, after claiming that scammers are using couriers to bypass bank checks. Financial institutions are increasingly capable of spotting and blocking suspicious fund transfers… Read More "FBI Warns Courier Cash Pickups Are Driving Crypto Scams"
Ravie LakshmananJun 16, 2026Vulnerability / Server Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply… Read More "CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation"
Law enforcement agencies in the UK, US and Canada have teamed up in an ambitious initiative which has already identified more than 20,000 victims of so-called “approval phishing.” Approval phishing is a technique whereby victims are tricked into providing full… Read More "Operation Atlantic Seizes $12m in Crypto Losses"
Cisco on Monday warned customers about yet another SD-WAN product zero-day exploited in attacks. The flaw, tracked as CVE-2026-20262, has been described as a medium-severity arbitrary file write issue affecting Catalyst SD-WAN Manager. An attacker can send specially crafted HTTP… Read More "Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks"
Ravie LakshmananJun 16, 2026Vulnerability / Network Security Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of… Read More "Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw"
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages 15 Jun 2026 • , 5 min. read Much has been written about how the days of phishing emails… Read More "A phishing attack that doesn’t steal your password"
The UK’s professional body for the cybersecurity sector has launched a new title designed to support more people at the start of their careers in the industry. UK Cyber Security Council said that the Associate Cyber Security Professional title is… Read More "UK Cyber Security Council Launches Associate Cyber Security Profession"
US and Indonesian law enforcement authorities have taken down a large-scale phishing network that has plotted over $20 million in fraud. Spearheaded by the FBI Atlanta field office, the operation targeted W3LL, a phishing kit which enables cybercriminals to impersonate… Read More "FBI Dismantles $20m Phishing Operation W3LL"
A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with residential proxy capabilities to broaden its impact. According to an advisory published by Cleafy, the malware has been observed targeting Spanish-speaking users,… Read More "Mirax Android Trojan Turns Devices Into Residential Proxy Nodes"
Security researchers have identified a surge in the misuse of mailbox rules within Microsoft 365 environments, with attackers increasingly relying on native email features to maintain access, exfiltrate data and manipulate communications after account compromise. The Proofpoint findings, published earlier… Read More "Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat"
