Throughout June 2026, incident responders have documented a pattern of attackers bypassing two-factor authentication systems through brute-force attacks against one-time password (OTP) generation endpoints. In at least one documented case, attackers gained administrative access to customer accounts at a SaaS provider by exhausting the search space of time-based OTP values … [Read more...] about Two-Factor Authentication Bypass: Attackers Brute-Force 2FA Systems, Gaining Access to Enterprise Accounts
France’s Tchap Government Messaging Breach Signals Weak Oversight of Encrypted State Communications
On June 7, 2026, France's National Cybersecurity Agency (ANSSI) detected suspicious activity on Tchap, the government's homegrown messaging service designed for secure communications across French ministries and public sector organizations. The breach indicates that a secure-by-design communication platform designed for state secrecy is vulnerable to the same human and … [Read more...] about France’s Tchap Government Messaging Breach Signals Weak Oversight of Encrypted State Communications
OpenSSL CVE-2026-45447: Heap Use-After-Free in PKCS#7 Verification Enables S/MIME RCE, Discovered With AI
On June 9, 2026, OpenSSL disclosed CVE-2026-45447, a high-severity heap use-after-free vulnerability (CVSS 9.8) in the PKCS7_verify() function that allows remote code execution via specially crafted PKCS#7 or S/MIME signed messages. The vulnerability was discovered by a California researcher working in collaboration with Claude AI and Anthropic Research, marking a notable … [Read more...] about OpenSSL CVE-2026-45447: Heap Use-After-Free in PKCS#7 Verification Enables S/MIME RCE, Discovered With AI
Microsoft Patch Tuesday June 2026: Record 200+ Vulnerabilities in Single Release, Three Pre-Disclosure Zero-Days
On June 9, 2026, Microsoft released Patch Tuesday security updates addressing 206 vulnerabilities—the largest single-month disclosure in the 23-year history of the program, exceeding the previous record of 167 CVEs. The volume alone signals something shifted in the threat landscape or in Microsoft's own development pipelines. Of the 206 fixes, 39 carry Critical severity rating, … [Read more...] about Microsoft Patch Tuesday June 2026: Record 200+ Vulnerabilities in Single Release, Three Pre-Disclosure Zero-Days
Check Point VPN Zero-Day (CVE-2026-50751) Actively Exploited by Qilin Ransomware, CISA Orders Emergency Patch
On June 8, 2026, Check Point disclosed CVE-2026-50751, a critical authentication bypass (CVSS 9.3) affecting Remote Access VPN, Mobile Access, and Spark Firewall products running the deprecated IKEv1 key exchange protocol. The flaw stems from improper certificate validation during IKEv1 Phase 1 handshake, allowing unauthenticated remote attackers to bypass the VPN login screen … [Read more...] about Check Point VPN Zero-Day (CVE-2026-50751) Actively Exploited by Qilin Ransomware, CISA Orders Emergency Patch
Ondas (ONDS) Buys Cyberhawk for $125 Million, Pulling Critical Infrastructure Inspection Data Into the Defense and Security Perimeter
On June 18, 2026, Ondas Inc. (Nasdaq: ONDS) announced a definitive agreement to acquire Cyberhawk Holdings Limited for approximately $125 million, roughly 95% in cash, with Cyberhawk leadership rolling about $5 million of proceeds into Ondas common stock under a one-year lock-up. The deal is expected to close in the third quarter of 2026, subject to regulatory approval. The … [Read more...] about Ondas (ONDS) Buys Cyberhawk for $125 Million, Pulling Critical Infrastructure Inspection Data Into the Defense and Security Perimeter
Fable 5’s Export Ban: When AI Vulnerability Discovery Became a National Security Cyber Weapon
Strip away the politics and the IPO timing and the export-control novelty, and the Fable 5 suspension is, at its core, a cybersecurity story. A frontier model was taken off the market three days after launch because the U.S. government decided its ability to find software vulnerabilities was a national security problem. That has never happened to a deployed commercial product … [Read more...] about Fable 5’s Export Ban: When AI Vulnerability Discovery Became a National Security Cyber Weapon
Global Scam Losses Near Half a Billion, One in Seven Consumers Hit in 2025
Global online fraud has crossed a threshold that can no longer be treated as background noise. Bitdefender's newly released 2026 Global Scam Intelligence Report — drawn from 12 months of live telemetry spanning trillions of URLs, billions of messages, call honeypots, and active advertising ecosystems — puts a number on the scale of the problem: nearly $500 million in consumer … [Read more...] about Global Scam Losses Near Half a Billion, One in Seven Consumers Hit in 2025
Google’s $32 Billion Wiz Bet Meets the OT Grid: Hitachi Becomes Its Critical-Infrastructure Channel
Hitachi and Google Cloud expanded their alliance this week, and the framing was physical AI — autonomous control of equipment, sensor-driven decision-making, frontline workers handing complex operations to agents. That is the part built for headlines. The part that matters is the security layer underneath it, because that is where Google is quietly assembling something larger … [Read more...] about Google’s $32 Billion Wiz Bet Meets the OT Grid: Hitachi Becomes Its Critical-Infrastructure Channel
Cybersecurity Stocks Fall Friday as Nasdaq’s 4.2% Tech Rout Sweeps Up CrowdStrike and Palo Alto
Cybersecurity stocks fell on Friday, June 5, dragged down with the rest of high-multiple technology as a hotter-than-expected jobs report revived fears of a Federal Reserve rate hike and triggered a sharp rotation out of growth names. The Nasdaq Composite dropped 4.18% to 25,709 — its worst single session in months — with the S&P 500 off 2.6% and the Dow down … [Read more...] about Cybersecurity Stocks Fall Friday as Nasdaq’s 4.2% Tech Rout Sweeps Up CrowdStrike and Palo Alto