Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, data breaches, ransomware incidents, and industry developments to help you stay informed and secure in the rapidly evolving threat landscape.
1. Tata Electronics Confirms Data Breach Exposing Apple and Tesla Trade Secrets
Published: June 22-23, 2026
India’s Tata Electronics, a major supplier and assembler for Apple and Tesla, confirmed a cybersecurity incident where ransomware group World Leaks posted over 200,000 files (around 630GB), including circuit board designs, employee passports, and Tesla chargeport controller details marked as trade secrets. Tata declined to pay ransom; operations remain unaffected, but Apple is investigating.
2. FortiBleed Campaign: Massive Credential Harvesting from 430,000+ FortiGate Firewalls
Published: June 23, 2026
A Russian-speaking initial access broker is behind “FortiBleed,” targeting over 430,000 FortiGate firewalls since February 2026. Attackers use brute-forcing and custom Golang sniffers (FortigateSniffer) leveraging diagnostic commands to capture credentials from traffic. CISA has urged hardening of Fortinet devices.
3. Microsoft June 2026 Patch Tuesday Addresses 200+ Vulnerabilities
Published: Mid-June 2026 (updates ongoing)
Microsoft’s June Patch Tuesday fixed over 206 vulnerabilities (39 critical), including multiple zero-days. This is one of the largest updates in recent years, covering Windows, Azure, Exchange, and more. Organizations are urged to prioritize patching.
4. Five Eyes Agencies Warn of AI-Driven Cyber Threats and Call for Whole-of-Society Response
Published: June 22, 2026
Cybersecurity leaders from the US, UK, Canada, Australia, and New Zealand issued a joint statement highlighting how frontier AI models are accelerating vulnerability discovery and exploitation. They recommend immediate strategy updates, rapid patching, and treating cyber risk as a leadership priority.
5. ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
Published: June 22, 2026
Attackers compromised ShapedPlugin’s update infrastructure, backdooring premium WordPress plugins. This supply chain incident highlights risks in the plugin ecosystem.
6. Fake AI Agent Skill Bypasses Scanners and Reaches 26,000+ Agents
Published: June 23, 2026
Security researchers created and distributed a seemingly benign AI agent skill that passed multiple scanners and reached thousands of agents (including corporate ones) via marketplaces and ads. It demonstrates gaps in AI supply chain trust signals.
7. Bajaj Auto Hit by Ransomware Attack Affecting Internal Systems
Published: June 23, 2026
India’s leading two-wheeler manufacturer Bajaj Auto disclosed a ransomware incident impacting internal systems. Details on the group and data exposure are emerging.
8. Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Published: June 23, 2026
Several malicious npm packages (e.g., aes-decode-runner-pro, postcss-minify variants) were discovered delivering remote access trojans. They masquerade as legitimate tools and target developers.
Stay Vigilant
Cyber threats continue to evolve with AI acceleration, supply chain compromises, and targeted ransomware. Patch promptly, monitor third-party risks, and implement strong access controls. Subscribe for daily/weekly updates and consider tools for vulnerability management and threat intelligence. Stay safe online!