Your Daily Dose of Cybersecurity News

Vulnerabilities & Exploits

GitHub finally pulls the plug on automatic install script execution...

Jun 11, 2026 · SecurityXP

Data Breaches

Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

Jun 11, 2026 · SecurityXP

Vulnerabilities & Exploits

Ivanti releases patches for critical Sentry vulnerabilities

Jun 10, 2026 · SecurityXP

Latest News

Vulnerabilities & ExploitsJun 10, 2026·4 min read

Microsoft Patches Record 200 Vulnerabilities in June 2026 Patch Tue...

Vulnerabilities & ExploitsJun 10, 2026·3 min read

Microsoft June 2026 Security Updates

Microsoft's Urgent Security Update Microsoft has just released a massive security update, fixing 204 vulnerabilities, including 38 critical ones. This is a...

Vulnerabilities & ExploitsJun 9, 2026·3 min read

SAP fixes critical flaws in NetWeaver and Commerce Cloud

Uncovering Critical Flaws in SAP NetWeaver and Commerce Cloud SAP's June 2026 Security Patch package is a big deal. It fixes 15 vulnerabilities, including...

ResearchJun 9, 2026·3 min read

Can Voice Agents Handle Bilingual Customers? Benchmarking Frontier ASR on Code-Switched Speech

The Code-Switching Conundrum More than half of the world's population speaks more than one language. Code-switching, the practice of switching between...

AI/ML SecurityJun 8, 2026·3 min read

Is OpenAI Lockdown Mode an Admission of Risk? Enough?

As AI-powered chatbots expand across customer service, technical support, and enterprise workflows, they become increasingly attractive targets for attackers seeking to extract sensitive data.

Data BreachesJun 8, 2026·3 min read

Meta AI Flaw Exposes 20K Instagram Accounts

This incident is a clear example of the ongoing risks associated with AI-powered support systems. The vulnerability allowed attackers to reset passwords without verifying email addresses associated wi...

Vulnerabilities & ExploitsJun 6, 2026·2 min read Breaking

CISA Flags SolarWinds Serv-U Flaw as Exploited

Over 12,000 SolarWinds Serv-U file transfer servers sit exposed to the internet. Attackers are already knocking them offline.

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Cisco SD-WAN Manager Under Attack, No Patch Yet

Cisco has confirmed active exploitation of a high-severity vulnerability in Catalyst SD-WAN Manager. The flaw, CVE-2026-20245, scores 7.8 on the CVSS scale.

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Everest Forms Pro RCE: WordPress Sites at Risk

Hackers are actively exploiting a critical vulnerability in the Everest Forms Pro WordPress plugin right now. The flaw, tracked as CVE-2026-3300, allows unauthenticated attackers to execute arbitrary ...

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Ubiquiti UniFi OS Auth Bypass Enables Root RCE

Ubiquiti disclosed three critical vulnerabilities in UniFi OS Server on May 21, 2026. Each scores a perfect 10.0 on the CVSS scale.

Security OperationsJun 5, 2026·2 min read

71% of SOCs Say AI Is Underdelivering: Report

Eighteen months ago, the AI SOC was a marketing line. Today it is a budget item.

Data BreachesJun 5, 2026·2 min read

AI Chatbot Trust Weaponized to Mine Crypto

Microsoft has spotted something new. Attackers are manipulating SEO rankings and AI chatbot recommendations to push fake utilities onto users who trust what the AI tells them.

Threat IntelligenceJun 5, 2026·2 min read

Gulf Executives Face WhatsApp Impersonation

It starts with a message. A senior executive at a Dubai energy firm opens WhatsApp and sees what looks like a text from their CEO.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Acer Addresses Zero-Day in Wave 7 Routers

The vulnerability allows unauthenticated attackers to access sensitive credentials from log archives. It's a broken access control flaw, which enables attackers to obtain plaintext credentials.

Vulnerabilities & ExploitsJun 4, 2026·3 min read

B&R PPT30 Operating System

This operating system is widely used in industrial automation worldwide. The issue affects versions prior to 1.8.0.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

ELI5: YellowKey (CVE-2026-45585) BitLocker Bypass that survived the Great Global CrowdStrike Outage of 24)

The vulnerability, identified as CVE-2026-45585, has significant implications for organizations using Windows PE, versions 10 and 11, and CrowdStrike, versions 6.0 and later.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

CISA Adds Magento RCE CVE-2026-45247 to KEV

This vulnerability, tracked as CVE-2026-45247, has a CVSS score of 9.8. Cybersecurity and Infrastructure Security Agency added this flaw to its Known Exploited Vulnerabilities catalog.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Cisco Unified Comms Manager Vuln & PoC Released Code

This vulnerability, identified as CVE-2026-20230, has a CVSS score of 8.6. That's a significant threat.

Vulnerabilities & ExploitsJun 4, 2026·4 min read

Hitachi Energy ITT600 Explorer

The vulnerability, identified as CVE-2024-8176, can be exploited to carry out a Denial of Service attack on the product, potentially disrupting essential services in the energy sector.

TechnologyJun 4, 2026·6 min read

ICANN Sets October 2026 DNS Trust Anchor Rollover

The Domain Name System, or DNS, is getting a major update to its security protocol. This update, scheduled for October 2026, affects the DNS Security Extensions root zone Key Signing Key, a crucial co...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.

SecurityXP — Cybersecurity News, Threat Intelligence & Infosec Utilities

GitHub finally pulls the plug on automatic install script execution...

Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks

Ivanti releases patches for critical Sentry vulnerabilities

Latest News

Microsoft Patches Record 200 Vulnerabilities in June 2026 Patch Tue...

Microsoft June 2026 Security Updates

SAP fixes critical flaws in NetWeaver and Commerce Cloud

Can Voice Agents Handle Bilingual Customers? Benchmarking Frontier ASR on Code-Switched Speech

Is OpenAI Lockdown Mode an Admission of Risk? Enough?

Meta AI Flaw Exposes 20K Instagram Accounts

CISA Flags SolarWinds Serv-U Flaw as Exploited

Cisco SD-WAN Manager Under Attack, No Patch Yet

Everest Forms Pro RCE: WordPress Sites at Risk

Ubiquiti UniFi OS Auth Bypass Enables Root RCE

71% of SOCs Say AI Is Underdelivering: Report

AI Chatbot Trust Weaponized to Mine Crypto

Gulf Executives Face WhatsApp Impersonation

Acer Addresses Zero-Day in Wave 7 Routers

B&R PPT30 Operating System

ELI5: YellowKey (CVE-2026-45585) BitLocker Bypass that survived the Great Global CrowdStrike Outage of 24)

CISA Adds Magento RCE CVE-2026-45247 to KEV

Cisco Unified Comms Manager Vuln & PoC Released Code

Hitachi Energy ITT600 Explorer

ICANN Sets October 2026 DNS Trust Anchor Rollover

Security Digest