Cybersecurity briefing — 2026-06-08

A malicious Python package can now steal your CI secrets at install time, before a single import ever runs.

• Storage Appliance Becomes Stealth Pivot Into M365
• Instagram Recovery Became the Takeover Path
• WordPress Form Bug Hands Out Admin Access
• PyPI Installs Now Steal CI Secrets
• Transitive protobuf.js Pulls Expand RCE Exposure
• SRG Adds Botnet Resilience to Extortion Infrastructure
• World Cup Fraud Is Already Parked and Ready
• Support Channels Become the Access Point for Extortion
• Botnet Swaps Payloads Across IoT Hardware
• Ceasefire Leaves PLC Footholds Inside Critical Infrastructure
• Default Gogs Installs Expose Private Repos to Anyone
• AI Brand Lures Turn Search Trust Into Credential Theft