Stay updated with the latest cybersecurity news! This roundup highlights critical vulnerabilities, emerging threats, data breaches, and key developments in the rapidly evolving digital security landscape. With threats accelerating due to AI advancements, nation-state actors, and supply chain risks, vigilance is essential.
1. Malicious Perplexity Chrome Extension Intercepts Searches and Address Bar Input
Published: June 29, 2026
Microsoft identified a malicious Chrome extension posing as the Perplexity AI search engine. It logged user searches and address bar inputs by routing them through an attacker-controlled server before redirecting to legitimate results. Google removed it from the Chrome Web Store following disclosure. The extension, with over potential widespread installs, set itself as the default search engine.
2. Mustang Panda Exploits Zoho WorkDrive in Attacks on Indian Government Targets
Published: June 29, 2026
The China-aligned APT group Mustang Panda conducted campaigns against Indian government and hydropower entities using new malware (SHARDLOADER, MINIRECON) and legitimate Zoho WorkDrive for command-and-control and data exfiltration. This blends malicious traffic with normal cloud activity. Acronis collaborated with CERT-In on response.
3. ‘DirtyClone’ Linux Kernel Vulnerability Enables Root Access
Published: June 29, 2026
A variant of the DirtyFrag flaw (CVE-2026-43503) allows local users with CAP_NET_ADMIN capability to gain root privileges via cloned packets. It affects default configurations on Debian, Ubuntu, and Fedora. Researchers warn of risks in multi-user or containerized environments.
4. ShinyHunters Claims Massive Oracle PeopleSoft Breaches, Including NAIC
Published: Recent (ongoing reporting June 2026)
The ShinyHunters group allegedly stole 3.1 TB of data from the National Association of Insurance Commissioners (NAIC) and targeted over 100 organizations (many in education) via Oracle PeopleSoft vulnerabilities. Victims include Nissan (potential payroll/SSN exposure). This highlights credential and third-party risks over zero-days.
5. WhatsApp Rolls Out Usernames for Enhanced Phone Number Privacy
Published: June 29, 2026
Meta’s WhatsApp began global username reservations to reduce reliance on sharing phone numbers. The optional feature improves privacy for its 3+ billion users, with no public directory. Rollout continues throughout the year.
6. Gamaredon (Russian APT) Expands Arsenal Against Ukraine
Published: June 29, 2026
Gamaredon evolved its malware toolkit with spear-phishing, HTML smuggling, and cloud abuse in 35+ campaigns targeting Ukrainian government and military. ESET notes persistent focus on data exfiltration to support Russian interests. New defenses are required.
7. Microsoft Removes 119 Malicious Edge Extensions Using Steganography
Published: June 29, 2026
Microsoft took down 119 Edge Add-ons (up to 2.6M installs) hiding malware in images/fonts for credential theft and ad fraud. The “StegoAd” operation, active since 2021, used evasion tactics like delayed activation.
8. CISA Adds Vulnerabilities to KEV Catalog, Including SimpleHelp and Cisco Issues
Published: June 29, 2026
CISA updated its Known Exploited Vulnerabilities list with flaws like SimpleHelp authentication bypass (CVE-2026-48558) and others in Cisco, PTC Windchill. Rapid weaponization seen (e.g., Cisco CUCM flaw in <24 hours). Ongoing alerts on Russian targeting of messaging apps.
Stay Vigilant
Cyber threats continue to evolve with AI-driven attacks, supply chain compromises, and state-sponsored campaigns. Patch promptly, enable MFA, monitor third-party risks, and train against phishing/social engineering. Subscribe for daily/weekly updates and consider advanced tools for threat detection and response. Stay safe online!