Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, nation-state espionage, data breaches, and industry developments to help you navigate the evolving digital threat landscape.
1. Chinese Hackers Abuse Google Workspace Rules to Steal Research and Defense Emails
Published: June 15, 2026
A China-linked espionage group (tracked as UNC6508) infiltrated North American medical, academic, and military networks for over a year. They deployed a backdoor on REDCap research servers to steal credentials and rewired victims’ Google Workspace rules to forward sensitive emails. Targets included clinical providers, universities, military health institutions, and advocacy groups.
2. North Korean Hackers Turn Developer Tools into Malware Delivery Channels
Published: June 15, 2026
North Korean-linked actors (Contagious Interview / Famous Chollima) used phishing campaigns themed around developer recruitment and code reviews. They hosted malicious scripts on GitHub repositories, delivering cross-platform malware (including Overlord Go framework) targeting finance, crypto, education, and tech sectors.
3. LiteLLM Vulnerability Chain Allows Low-Privilege Takeover of AI Gateway Servers
Published: June 15, 2026
Critical flaws in the popular open-source LiteLLM AI gateway (CVSS 9.9) enable low-privilege users to escalate to admin and execute code, exposing API keys, prompts, and responses. Fixed in v1.83.14-stable; affects servers proxying calls to multiple AI model providers.
4. Microsoft 365 Copilot One-Click Flaw Could Steal Emails, Files, and MFA Codes
Published: June 15, 2026
Varonis researchers chained bugs (CVE-2026-42824) into “SearchLeak,” allowing data exfiltration from Copilot Enterprise Search via a trusted microsoft.com link. Microsoft mitigated it backend-side; no evidence of active exploitation.
5. ShinyHunters Exploits Oracle PeopleSoft Zero-Day, Breaches 100+ Organizations
Published: June 11-15, 2026
The extortion group (UNC6240) used CVE-2026-35273 (critical RCE in PeopleTools Environment Management) as a zero-day against education and enterprise targets, stealing data from over 300 instances. Victims include universities; Council of Europe also investigating related claims. Oracle issued mitigation.
6. Over 400 Arch Linux Packages Compromised with Rootkit and Infostealer
Published: Recent (June 2026)
Supply chain attack compromised numerous Arch Linux packages, pushing malware. Ongoing investigations highlight risks in open-source package ecosystems.
7. WordPress Plugin Supply-Chain Attack via OptinMonster, PushEngage, TrustPulse
Published: June 15, 2026
Attackers tampered with JavaScript files served via CDN, creating hidden admin accounts and backdoors for logged-in admins. Affects sites using these popular Awesome Motive plugins; treat compromised sites as fully breached.
8. FBI Dismantles Massive Chinese ‘Outsider Enterprise’ Phishing Service
Published: June 14, 2026
Operation with Google and others took down a phishing-as-a-service platform using thousands of sites, stealing millions of credit cards and causing ~$1.9B in losses. Additional ransomware and breach reports (e.g., Mackay Sugar, Novo Nordisk) continue to emerge.
Stay Vigilant
Cyber threats—from nation-state espionage and AI-enhanced attacks to supply-chain compromises and zero-days—continue to accelerate. Organizations should prioritize patching (especially PeopleSoft, AI gateways, and WordPress plugins), monitor for anomalous email rules and OAuth grants, implement strong MFA/zero-trust, and maintain robust incident response plans.
Subscribe to our newsletter for daily/weekly updates. Consider security tools for vulnerability scanning, AI threat detection, and supply-chain monitoring. Stay safe online!