Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, significant data breaches, and key developments to help you stay informed and secure in the fast-evolving digital landscape.
1. ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) in Widespread Attacks on Universities and Organizations
Published: June 11, 2026
The notorious ShinyHunters group is actively exploiting a zero-day vulnerability in Oracle PeopleSoft, breaching over 100 organizations, primarily educational institutions. They use a “gadget chain” of old and new vulnerabilities to steal sensitive data, including student records, leading to extortion demands. Oracle has issued mitigations, and Google/Mandiant have attributed the campaign.
[Read more](https://thehackernews.com/ or https://www.bleepingcomputer.com/news/security/oracle-peoplesoft-servers-hacked-in-shinyhunters-data-theft-attacks/)
2. Microsoft Releases Record-Breaking June 2026 Patch Tuesday Fixing 206 Vulnerabilities
Published: June 9-11, 2026
Microsoft addressed a record 206 vulnerabilities in its June Patch Tuesday, including 33 critical ones and three publicly disclosed zero-days (e.g., issues in BitLocker, HTTP/2, and privilege escalation). This update also incorporates numerous Chromium fixes for Edge. Organizations are urged to prioritize deployment amid rising threats.
3. CISA Adds Multiple Vulnerabilities to Known Exploited Vulnerabilities (KEV) Catalog
Published: June 9, 2026 (and recent days)
CISA added several flaws to the KEV catalog, including CVE-2026-7473 (Arista EOS) and others like Ivanti Sentry issues. Federal agencies face tight remediation deadlines. This underscores ongoing exploitation of network and endpoint vulnerabilities.
4. New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition
Published: June 11, 2026
Attackers can leverage XML files in Windows recovery partitions to bypass BitLocker encryption in a new technique dubbed GreatXML. This endpoint security bypass highlights risks in recovery mechanisms.
5. The Gentlemen Ransomware Claims 478 Victims and Exhibits Worm-Like Spread
Published: June 11, 2026
This ransomware group has hit nearly 500 victims and demonstrates worm-like propagation capabilities, posing significant risks to unsegmented networks.
6. CISA Directs Federal Agencies to Prioritize Risk-Based Vulnerability Patching (BOD 26-04)
Published: Recent (June 2026)
New binding operational directive emphasizes reviewing policies with focus on the KEV catalog and risk levels to combat alert fatigue and improve remediation efficiency.
7. Escalating Attacks on Cisco Catalyst SD-WAN Flaws; Researchers and CISA Warn
Published: Recent
CISA and researchers highlight active exploitation of vulnerabilities in Cisco Catalyst SD-WAN, urging immediate patching to prevent network compromises.
8. AI Agent Security Concerns: New Attacks Trick OpenClaw into Code Execution and Secret Leaks
Published: June 11, 2026
Emerging threats target AI agents like OpenClaw, tricking them into running malicious code and leaking secrets, highlighting new frontiers in AI security.
Stay Vigilant
Cyber threats continue to evolve rapidly, with a surge in zero-days, ransomware innovation, and supply chain/AI-targeted attacks. Patch promptly, enable multi-factor authentication, segment networks, and monitor for anomalous activity. Subscribe to our newsletter for daily/weekly updates, and consider advanced tools for vulnerability management and threat intelligence. Stay safe online!
Sources aggregated from leading outlets including The Hacker News, SecurityWeek, CISA, BleepingComputer, and others. Always verify with official vendor advisories.