A team of hackers associated to the North Korean-linked Lazarus Group has conducted a large-scale cyber theft campaign targeting over 100 cryptocurrency organizations across more than 20 countries, according to Arctic Wolf. The spear-phishing campaign involved multiple social engineering techniques,… Read More "North Korean Hackers Target Crypto Firms with ClickFix and Zoom Lures"
The notorious extortion group ShinyHunters claims to have hacked the Council of Europe and to have stolen nearly 300 gigabytes of data. Europe’s leading human rights organization and an official United Nations observer, the Council of Europe was founded in… Read More "ShinyHunters Claims Council of Europe Hack"
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the sites. When a site administrator was logged in as the file loaded, the code… Read More "Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites"
An attack by the Anubis ransomware group on a port authority on the Adriatic has been cast as a warning to maritime infrastructure. New analysis, published on June 11 by threat intelligence firm Resecurity, examined a cyber-attack which saw Anubis list the Adriatic… Read More "Adriatic Port Cyber-Attack Sparks Warning Over Maritime Security"
More 70,000 French government employees had personal details stolen. Why and by whom? On June 8, 2026, DINUM announced that the official French government chat service (Tchap) had been breached on June 7. At the same time, a threat actor… Read More "French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker"
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to… Read More "LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers"
Attackers have hijacked the code behind several popular WordPress plugins to plant hidden backdoors and rogue administrator accounts on as many as 1.2 million sites. The supply-chain attack, detailed by Dutch malware research firm Sansec on June 13, tampered with… Read More "Attackers Hijack Popular WordPress Plugins to Deploy Backdoors"
Pharmaceutical giant Novo Nordisk last week disclosed a cybersecurity incident involving unauthorized access to personal data. Novo Nordisk is a Danish pharmaceutical company renowned for developing treatments for diabetes and weight management, including widely popular drugs such as Ozempic, Wegovy,… Read More "Ozempic Maker Novo Nordisk Says Hackers Breached IT Systems"
Swati KhandelwalJun 15, 2026Vulnerability / Enterprise Security A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained… Read More "One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes"
Many of the most common metrics used to measure the effectiveness of the security operations center (SOC) are at best inaccurate and at worst actively harm SecOps teams, the National Cyber Security Centre (NCSC) has warned. The NCSC’s CTO for… Read More "No Metrics Are Better Than Bad Metrics in the SOC, Says NCSC"
