Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
Researchers documented an intrusion in which an LLM agent adapted its actions in real time, harvested credentials, moved laterally and encrypted production configuration data.
The U.S. Department of Homeland Security investigated unauthorized access to the Homeland Security Information Network, a platform used to share sensitive information across federal, state, local and private-sector…
Aflac disclosed that a breach involving its Japanese subsidiary exposed information associated with approximately 4.38 million customers. BleepingComputer published the underlying report or notice on 2026-06-30, placing the…
Microsoft analyzed a Chromium browser extension using AI-related branding that altered search behavior and redirected users through unwanted services. Microsoft Security Blog published the underlying report or notice on 2026-06-29, placing the event within
Kaspersky analyzed a vulnerability in Schneider Electric software whose license-management component could create a route into industrial environments if left exposed. Kaspersky Securelist published the underlying report or notice on 2026-06-26, placing the event
Klue investigated a supply-chain intrusion in which stolen integration access exposed Salesforce-connected data belonging to multiple customers. SecurityWeek published the underlying report or notice on 2026-06-26, placing the…
A Minnesota man was sentenced to 18 months in prison for participating in a credential-stuffing attack against DraftKings customer accounts. CyberScoop published the underlying report or notice on 2026-06-25, placing the event within the
Reporting and case material indicated that Russian authorities used a Cellebrite phone-extraction tool against a dissident after the vendor said it had stopped operating there. The Record published the underlying report or notice on
Ukraine’s state postal operator reported that a cyberattack disrupted parts of its mobile application and affected access to customer services. The Record published the underlying report or notice on 2026-06-25, placing the event within
Meta reportedly paused an employee-data monitoring program after workers were able to access information beyond the intended protections. CSO Online published the underlying report or notice on 2026-06-24, placing the event within the month’s
Two members of the Scattered Spider cybercrime group were convicted over the Transport for London attack, which caused prolonged disruption and approximately £38 million in costs. CSO Online published the underlying report or notice
Researchers found that a malicious skill for an AI-agent ecosystem passed available security checks and was installed or reached by roughly 26,000 users. CSO Online published the underlying report or notice on 2026-06-24, placing
Europol and international partners announced coordinated action against SocGholish, Amadey and StealC infrastructure used to steal information and enable further cybercrime. Europol published the underlying report or notice on 2026-06-24, placing the event within
The US Justice Department seized cloud infrastructure allegedly used by businesses connected to the Huione Group to support online scams and illicit transactions. CyberScoop published the underlying report or notice on 2026-06-23, placing the
Kaspersky documented a campaign distributing malicious script files through WhatsApp that installed legitimate remote-monitoring software for unauthorized access. Kaspersky Securelist published the underlying report or notice on 2026-06-22, placing the event within the month’s
Unauthorized emergency notifications were sent to residents in parts of Brazil through a system designed for urgent public-safety warnings. The Record published the underlying report or notice on 2026-06-22, placing the event within the
Unit 42 documented large-scale credential attacks that automate login attempts against exposed services using stolen or reused account information. Palo Alto Networks Unit 42 published the underlying report or notice on 2026-06-20, placing the
An investigation by KrebsOnSecurity linked the Popa residential-proxy botnet to infrastructure and business relationships involving a publicly traded Israeli company. KrebsOnSecurity published the underlying report or notice on 2026-06-18, placing the event within the
A California water utility investigated a cyberattack claim made by an actor described as Iran-linked, drawing attention to risks facing small public-service providers. Cybersecurity Dive published the underlying report or notice on 2026-06-17, placing
CISA’s acting leadership warned that major disruptions affecting critical infrastructure should be treated as foreseeable events requiring practical resilience planning. Cybersecurity Dive published the underlying report or notice on 2026-06-17, placing the event within
Kaspersky found dozens of malicious wallpaper items distributed through Steam Workshop that could expose gamers to malware and account theft. Kaspersky Securelist published the underlying report or notice on 2026-06-16, placing the event within
Reported cases showed that access to Flock license-plate camera data could be misused by authorized users to track people for personal purposes. Schneier on Security published the underlying report or notice on 2026-06-16, placing
A ransomware incident forced Mackay Sugar to suspend mill operations, creating a visible operational impact during the production season. SecurityWeek published the underlying report or notice on 2026-06-15,…
The Council of Europe opened an investigation after a criminal group claimed access to internal information and published material as evidence. BleepingComputer published the underlying report or notice…
