AI Security Roundup

** Ravie Lakshmanan ** Jun 09, 2026 Vulnerability / Cyber Espionage Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, …

** Ravie Lakshmanan ** Jun 09, 2026 Vulnerability / Backup Software Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote …

Microsoft on Monday confirmed that it temporarily removed some GitHub repositories in response to a recent security incident that led to 73 of its open-source projects being compromised to inject an …

** Ravie Lakshmanan ** Jun 09, 2026 Privacy / Artificial Intelligence Meta on Tuesday announced that it will use information shared by other businesses to personalize users’ feed and responses …

ISC Stormcast For Tuesday, June 9th, 2026 <https://isc.sans.edu/podcastdetail/9964>

I’ve been using the GnuWin32 CoreUtils for Windows for many years now (it gives you many *nix core commands on Windows). Microsoft has just released their coreutils version for Windows. You can …

ISC Stormcast For Friday, June 5th, 2026 <https://isc.sans.edu/podcastdetail/9960>

A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a MSI-branded background[ 1 ]. Yesterday, I spotted another one! It seems that the technic is getting …

This diary continues the Internet Storm Center’s tracking of the TeamPCP supply chain campaign, first documented in the SANS white paper When the Security Scanner Became the Weapon and most …

ISC Stormcast For Monday, June 8th, 2026 <https://isc.sans.edu/podcastdetail/9962>

Hacking Meta’s AI Chatbot Hackers are convincing Meta’s AI support chatbot to let them take over other peoples’ accounts: > A > video > posted on X showed the step-by-step process to hack …

Anthropic’s Project Glasswing Update In April, Anthropic initated Project Glasswing . The idea was to let companies use their new model to find and fix vulnerabilities in their own software. It was a …

AI Worm Researchers have prototyped an AI-powered internet worm . The coolest thing about the prototype is that it carries its own LLM with it, and runs it on computers that have been broken into. …

** Ravie Lakshmanan ** Jun 08, 2026 Cyber Espionage / Malware A China-nexus cyber espionage group has been observed deploying a BSD variant of a known backdoor called BRICKSTORM, as well as two other …

Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across professional, legal, and financial services …

Critical Zcash Vulnerability Found and Fixed If you’re a user—owner?—of this cryptocurrency, this is important: > On May 29, the security researcher Taylor Hornby found a critical vulnerability in …

Mythos is real. I know a big chunk of the industry thinks it’s a marketing stunt, and I get why. I get it. But I’ve seen the findings, and they’re bad. These aren’t …

Phishing has always been a numbers game. AI has turned it into a volume machine. Attackers can now create convincing emails, fake login pages, and tailored lures in minutes. Every polished message …

** Ravie Lakshmanan ** Jun 08, 2026 Cybersecurity / Hacking Monday again. The weekend was meant to be quiet. It wasn’t. Last week had poisoned packages, a broken AI helper, and a worm tearing …

** Ravie Lakshmanan ** Jun 08, 2026 Spyware / Mobile Security Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group . In addition, the tech …

** Ravie Lakshmanan ** Jun 08, 2026 Vulnerability / Network Security Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments …

** Swati Khandelwal ** Jun 08, 2026 Linux / Vulnerability Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user …

ISC Stormcast For Tuesday, June 2nd, 2026 <https://isc.sans.edu/podcastdetail/9954>

For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An SVG (“Scalable Vector Graphic”) is a web-friendly vector file format used for graphics and icons. No …

ISC Stormcast For Wednesday, June 3rd, 2026 <https://isc.sans.edu/podcastdetail/9956>