Daily cybersecurity briefing for CISOs and security leaders — synthesized from 16 leading publications every morning.
Each dot is a story tracked in the last 30 days · Mon–Fri + Week in Review Saturday
Full screen →Saturday, June 13, 2026 · 12:10
Russian national charged in connection with Void Blizzard espionage campaign · DOJ, FBI Seize 13 Domains in Chinese Recruitment Op · Authorities dismantle crypto laundering service that moved €336 million for cybercriminals · Over 73,000 French govt employees affected in Tchap messenger breach
North Koreans behind nearly half of US tech industry hacks, says CrowdStrike · China-linked JDY botnet expands targeting of U.S. military networks · Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims · Who Runs the Ransomware Group ‘The Gentlemen?’
UK weakens proposed telecoms defenses against Chinese hackers after industry pushback · IT sector faces growing threats from IP-hungry China, AI-enabled cybercriminals · Anthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of You · ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances
Iran Signed a Ceasefire — Its Hackers Didn't · Microsoft’s open source tools were hacked to steal passwords of AI developers · French government messaging platform breached through account hijacking · New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances · Russia upgrades rules for its digital spy system to better track citizens online · Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks · AI Agents Are the New Insiders
Anthropic scales Claude Mythos to critical infrastructure in 15+ countries · NSA said to be readying Anthropic’s Mythos for use in cyber operations · Chinese APT deploys new malware to keep access to hacked networks · Srsly Risky Biz: NATO's cyber approach needs to change
China's TA4922 Expands Cybercrime Attacks Globally · CrowdStrike, Palo Alto Networks defy estimates as AI fuels cyber demand · AI is helping low-skill hackers pull off advanced cyberattacks · Attackers obtained encrypted password vaults from some Dashlane user accounts
Srsly Risky Biz: NATO's cyber approach needs to change · CISA warns of cyberattacks targeting fuel tank monitoring systems · China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa · U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors
AI-built ransomware toolkit automates EDR evasion, AD discovery · China Uses Dual-Method Cyberattack on Czech Orgs · Anthropic scales Claude Mythos to critical infrastructure in 15+ countries · Password manager Dashlane says hackers stole some customers’ password vaults
NSA selects new leads for key cybersecurity posts · Sophos uncovers AI-powered malware lab built for EDR evasion · Microsoft launches MXC, an OS-level sandbox for AI agents, with OpenAI and Nvidia already on board · Anthropic’s browser agent got hijacked 31.5% of the time before safeguards engaged
Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns · Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks · Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning · Iranian hackers blamed for breach of Los Angeles transit system that took weeks to recover
Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns · Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies · Dutch govt disrupts malware botnet with 17 million infected devices · New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks
Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns · UK spy chief labels AI ‘unstoppable force’ with offensive, defensive ramifications for cyberspace · CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain · Chinese Phishers Use Live MFA Interception for Digital Wallet Fraud
Iranian intelligence service behind hack of LA transit system, researchers say · MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries · Dutch government blocks US company from acquisition, citing ‘risk to public interest’ · Charter confirms data breach after ShinyHunters extortion threat
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks · Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning · Kremlin appoints cyber executive with alleged GRU ties to Security Council role · Anthropic: Claude Mythos identified 10,000+ software flaws
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks · Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms · Lessons for organizations from the Verizon 2026 Data Breach Investigations Report · The AI Era Is Creating a Bug Hunting Arms Race
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks · Iran-linked hackers target key US, allied sectors with sophisticated spear-phishing messages · First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups · Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada
China's Webworm Uses Discord, Microsoft Graphs to Hack EU Governments · Belarus-linked hackers use fake training certificates to target Ukrainian officials · European authorities take down prolific cybercrime VPN service · A hacker group is poisoning open source code at an unprecedented scale
Xi and Putin pledge closer cooperation on AI, cyberspace and satellite systems · Europe dismantles VPN service used by cybercriminals to hide ransomware attacks · Srsly Risky Biz: Politicians ditch Signal for homegrown apps · Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
CISA credential leak raises alarms, and Capitol Hill demands answers · Ukraine says Russia is deploying AI-powered malware on the battlefield · Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network · Verizon DBIR: Vulnerability exploitation is the dominant initial access vector
Verizon Breach Report: Vulnerability Exploitation Surges · Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering · The New Phishing Click: How OAuth Consent Bypasses MFA · CISA Admin Leaked AWS GovCloud Keys on Github
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations · Interpol Launches Sweeping Cybercrime Crackdown in MENA Region · Grafana says stolen GitHub token let hackers steal codebase · Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
Researchers say AI just broke every benchmark for autonomous cyber capability · Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access · Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation · OpenAI launches Daybreak to combat cyber threats
Pentagon cyber official calls advanced AI ‘revolutionary warfare’ · Mustang Panda Linked to New Modular FDMTP Backdoor · Major tech manufacturer Foxconn confirms cyberattack hit North American factories · OpenAI confirms security breach in TanStack supply chain attack
Closed briefing sets stage for House hearing on Anthropic’s Mythos and cyber risks · Researchers say AI just broke every benchmark for autonomous cyber capability · Daybreak is OpenAI’s answer to the AI arms race in cybersecurity · Vector embedding security gap exposes enterprise AI pipelines
China's 'FamousSparrow' APT Nests in South Caucasus Energy Firm · ‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack · Foxconn confirms cyberattack claimed by Nitrogen ransomware gang · West Pharmaceutical warns of ransomware attack impacting business operations
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation · Cloudflare Cuts 1,100, Arctic Wolf Axes 250 Amid AI Surge · Instructure pays ransom after Canvas incident as Congress announces investigation · Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
Cyber Espionage Group Targets Aviation Firms to Steal Map Data · Google spotted an AI-developed zero-day before attackers could use it · AI tool poisoning exposes a major flaw in enterprise agent security · UK water company allowed hackers to lurk undetected for nearly two years, regulator finds
OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos · Poland says hackers breached water treatment plants, and the US is facing the same threat · MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack · American duo sentenced for hosting laptop farms for North Korean IT workers
Iranian government hackers using Chaos ransomware as cover, researchers say · OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos · Polish intelligence warns hackers attacked water treatment control systems · OpenAI tunes GPT-5.5-Cyber for more permissive security workflows
Polish intelligence warns hackers attacked water treatment control systems · DOJ says ransomware gang tapped into Russian government databases · MuddyWater hackers use Chaos ransomware as a decoy in attacks · Hackers compromise Daemon Tools in global supply-chain attack, researchers say
CISA wants critical infrastructure to operate ‘weeks to months’ in isolation during conflict · Middle East Cyber Battle Field Broadens — Especially in UAE · Hackers compromise Daemon Tools in global supply-chain attack, researchers say · Trellix Source Code Breach Highlights Growing Supply Chain Threats
Australia launches cyber review board modeled on version disbanded in US · Everest Group Begins Leaking Alleged Liberty Mutual Data · Trellix discloses data breach after source code repository hack · Five Eyes Sound Alarm on Autonomous AI Security Risks
Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M · Why data centers now belong on the critical infrastructure list · Risky Bulletin: DigiCert hacked with a malicious screensaver file · Progress warns of critical MOVEit Automation auth bypass flaw
76% of All Crypto Stolen in 2026 Is Now in North Korea · BlueNoroff Uses Fake Zoom Calls to Turn Victims Into Attack Lures · Chinese National Extradited Over Silk Typhoon Cyber Campaign · China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
DHS Shutdown Ends as CISA Faces Long Recovery · Claude Code, Copilot and Codex all got hacked. Every attacker went for the credential, not the model. · US ransomware negotiators get 4 years in prison over BlackCat attacks · Two new extortion crews are speedrunning the Scattered Spider playbook
Srsly Risky Biz: US Vows to Fight Distillation Attacks · Lotus Wiper Attack Targets Venezuelan Energy Firms, Utilities · Everyone’s building AI agents. Almost nobody’s ready for what they do to identity. · SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
Risky Bulletin: Ukrainians hacked Russian satellite comms platform · Chinese National Extradited Over Silk Typhoon Cyber Campaign · Germany Caught Up in Likely Russian Signal Phishing · Cyber Command, NSA chief warns foreign adversaries likely to target midterms
Risky Bulletin: New fingerprinting technique can track Tor users · Researchers Identify Fast16 Sabotage Malware That Pre-Dates Stuxnet · Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side · Most Cybersecurity Professionals Feel Undervalued and Underpaid
A dozen allied agencies say China is building covert hacker networks out of everyday routers · AI Tools Are Helping Mediocre North Korean Hackers Steal Millions · Iran’s cyber threat may be less ‘shock and awe’ than ‘low and slow,’ officials say · Mozilla: Anthropic's Mythos found 271 security vulnerabilities in Firefox 150
A dozen allied agencies say China is building covert hacker networks out of everyday routers · Surveillance campaigns use commercial surveillance tools to exploit long-known telecom vulnerabilities · In a first, a ransomware family is confirmed to be quantum-safe · Vercel attack fallout expands to more customers and third-party systems
China’s cyber capabilities now equal to the US, warns Dutch intelligence · Hackers deployed wiper malware in destructive attacks on Venezuela’s energy sector · Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks · France confirms data breach at government agency that manages citizens’ IDs
UK cyber agency handling four major incidents a week as nation-state attacks surge · Pentagon Cyber Leaders Back $1.5T Budget Request · Mozilla: Anthropic's Mythos found 271 security vulnerabilities in Firefox 150 · Three AI coding agents leaked secrets through a single prompt injection. One vendor's system card predicted it
KelpDAO suffers $290 million heist tied to Lazarus hackers · ZionSiphon Malware Targets Water Infrastructure Systems · Adversaries hijacked AI security tools at 90+ organizations. The next wave has write access to the firewall · Vercel’s security breach started with malware disguised as Roblox cheats
Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems · Finance Chiefs Warn New AI Models May Rattle Global Banking · EU pushes for stronger cloud sovereignty, awards €180 million to four providers · AI platform ATHR makes voice phishing a one-person job
Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant · ZionSiphon malware designed to sabotage water treatment systems · US nationals sentenced for aiding North Korea’s tech worker scheme · FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
US nationals sentenced for aiding North Korea’s tech worker scheme · ZionSiphon malware designed to sabotage water treatment systems · Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware · New ATHR vishing platform uses AI voice agents for automated attacks
Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant · Two US nationals jailed over scheme that generated $5 million for the North Korean regime · UK warns businesses to address cyber risks amid Anthropic AI panic · Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway.
CISA Workers Recalled Despite Shutdown · Sweden says pro-Russian hackers attempted to breach thermal power plant · We’re only seeing the tip of the chip-smuggling iceberg · OpenAI Touts Wider Access to Its New Cyber Model
APT41 Delivers 'Zero-Detection' Backdoor to Harvest Cloud Credentials · FBI takedown of W3LL phishing service leads to developer arrest · CSA: CISOs Should Prepare for Post-Mythos Exploit Storm · OpenAI’s Mac apps need updates thanks to the Axios hack
Iranian hackers launching disruptive attacks at U.S. energy, water targets, feds warn · Feds quash widespread Russia-backed espionage network spanning 18,000 devices · Do Ceasefires Slow Cyberattacks? History Suggests Not · Tech giants launch AI-powered ‘Project Glasswing’ to identify critical software vulnerabilities
Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs · Inside the FBI’s router takedown that cut off APT28’s ‘tremendous access’ · Mythos autonomously exploited vulnerabilities that survived 27 years of human review. Security teams need a new detection playbook · To counter cookie theft, Chrome ships device-bound session credentials
Iran-linked hackers disrupt operations at US critical infrastructure sites · US operation evicts Russia from hacked SOHO routers used to breach critical infrastructure · APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies · Breach exposes sensitive LAPD files stored in city attorney system
US Critical Infrastructure Facing Iranian-Linked OT Threats · Feds quash widespread Russia-backed espionage network spanning 18,000 devices · Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems · Cybercrime losses jumped 26% to $20.9 billion in 2025
China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware · German police unmask two suspects linked to REvil ransomware gang · Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations · Over $17bn Lost to Cyber Fraud in the Last Year, Warns FBI
Risky Bulletin: Iranian password sprays came first, then came the missiles · Medtech giant Stryker says it’s back up after Iranian cyberattack · China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing · CISA gives agencies two weeks to patch video conferencing bug exploited by Chinese hackers
Medtech giant Stryker says it’s back up after Iranian cyberattack · House Dems decry confirmed ICE usage of Paragon spyware · Software supply chain hacks trigger wave of intrusions, data theft · Akira ransomware group can achieve initial access to data encryption in less than an hour
European-Chinese geopolitical issues drive renewed cyberespionage campaign · Iran-linked actors target Middle Eastern city governments to undermine missile-strike responses · Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected · In the wake of Claude Code's source code leak, 5 actions enterprise security leaders should take now
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 · Risky Bulletin: Iranian password sprays came first, then came the missiles · Iran Deploys 'Pseudo-Ransomware,' Revives Pay2Key Operations · ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void
Iranian Cyberthreats Test US Infrastructure Defenses · ‘Missed opportunity’: US government’s absence from RSAC Conference leaves stark void · Axios npm packages backdoored in supply chain attack · Stryker restores most manufacturing after cyberattack
FBI confirms hack of Director Patel's personal email inbox · Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign · European Commission confirms data breach after Europa.eu hack · Healthcare software firm CareCloud informs SEC of potential patient data leak
DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses · Coruna, DarkSword & Democratizing Nation-State Exploit Kits · FBI confirms theft of director’s personal emails by Iran-linked hacking group · China Upgrades the Backdoor It Uses to Spy on Telcos Globally
CISA Forced Into 'Reactive' Cyber Posture Amid Shutdown · US: FCC Bans Foreign-Made Routers Over National Security Concerns · Srsly Risky Biz: Why get a warrant when you have Kash? · Google moves post-quantum encryption timeline up to 2029
US: FCC Bans Foreign-Made Routers Over National Security Concerns · DarkSword’s GitHub leak threatens to turn elite iPhone hacking into a tool for the masses · UK cyber chief urges ‘full court press’ to counter rising cyber threats · Stryker says malware was involved in recent cyberattack as production lines reopen
Self-propagating malware poisons open source software and wipes Iran-based machines · DOE Sets 5-Year Plan to Harden US Grid Against Cyberattacks · FBI warns of Russian, Iranian cyber activity involving messaging platforms · Trivy supply-chain attack spreads to Docker, GitHub repos
FBI Seizes Iranian Online Leak Sites After Stryker Hack · Russian hackers go after high-value targets through Signal · Texas Gov. Orders State Review of Chinese-Made Medtech · Operation Alice Takes Down 370,000+ Dark Web Sites
FBI seizes Handala data leak site after Stryker cyberattack · CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices · DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover · Srsly Risky Biz: Successful war leaves Iran with one option, its cyber forces
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks · The Danger Behind Meta Killing End-to-End Encryption for Instagram DMs · FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker · Meta's rogue AI agent passed every identity check — four gaps in enterprise IAM explain why
Srsly Risky Biz: Successful war leaves Iran with one option, its cyber forces · Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild · EU Sanctions Companies in China, Iran for Cyberattacks · EDR killers are now standard equipment in ransomware attacks
CISA official says agency has not seen uptick in cyber threats amid Iran war · EU Belatedly Sanctions Chinese and Iranian Hackers · Stryker says it’s restoring systems after pro-Iran hackers wiped thousands of employee devices · GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX
EU sanctions Chinese company behind 65,000-device hack · China-Nexus Hackers Skulk in Southeast Asian Military Orgs for Years · OpenClaw can bypass your EDR, DLP and IAM without triggering a single alert · Stryker attack wiped tens of thousands of devices, no malware needed
ISMG Editors: Iran Conflict Expands Into Cyber Warfare · Washington is right: Cybercrime is organized crime. Now we need to shut down the business model · The ransomware economy is shifting toward straight-up data extortion · Telus Digital confirms hack as ShinyHunters claims credit for massive data theft
Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker · US entities face heightened cyber risk related to Iran war · Iran MOIS Colludes With Criminals to Boost Cyberattacks · Risky Bulletin: Gen. Joshua Rudd confirmed as next CyberCom and NSA head
Stryker attack highlights nebulous nature of Iranian cyber activity amid joint U.S.-Israel conflict · Officials worry Salt Typhoon apathy is killing momentum for tougher telecom security rules · AI-generated Slopoly malware used in Interlock ransomware attack · Stryker tells SEC that timeline for recovery from cyberattack unknown
Medical device giant Stryker confirms cyberattack as employees say devices were wiped · Srsly Risky Biz: President Trump's best ever cyber strategy · ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites · Modernizing HIPAA: Are You Ready?
Rudd confirmed to head NSA, Cyber Command after near year-long vacancy · US entities face heightened cyber risk related to Iran war · US military contractor likely built iPhone hacking tools used by Russian spies in Ukraine · DOGE employee stole Social Security data and put it on a thumb drive, report says
White House Cyber Strategy Prioritizes Offense · US entities face heightened cyber risk related to Iran war · Russian Hackers Target WhatsApp and Signal Accounts of Global Military and Government Officials · An iPhone-hacking toolkit used by Russian spies likely came from U.S military contractor
China-Linked Hackers Use Malware Trio for Telecom Espionage · Risky Bulletin: New White House EO prioritizes fight against scams and cybercrime · How AI Assistants are Moving the Security Goalposts · Why Claude Code Security Has Shaken the Cybersecurity Market
Tech Giants, Washington Rally for Anthropic in Pentagon Feud · Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor · Tycoon 2FA Goes Boom as Europol, Vendors Bust Phishing Platform · From Ukraine to Iran, Hacking Security Cameras Is Now Part of War’s ‘Playbook’
Srsly Risky Biz: The four hour cyber war on Iran · 149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict · Zurich Acquires Beazley in $11 Billion Deal to Lead Cyberinsurance · Google says 90 zero-days exploited in 2025 as commercial vendor activity grows
Risky Bulletin: Cyber Command conducted cyberattacks ahead of Iran strikes · Pro-Russia actors team with Iran-linked hackers in attacks · Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack · Sprawling FBI, European operation takes down Leakbase cybercriminal forum
US and Israel Launch 'Major Combat Operations' Against Iran · Western Cybersecurity Experts Brace for Iranian Reprisal · US-Israel and Iran Trade Cyberattacks: Pro-West Hacks Cause Disruption as Tehran Retaliates · UK warns of Iranian cyberattack risks amid Middle-East conflict
New episodes every weekday morning — subscribe wherever you listen.
