Cybersecurity briefing, 2026-06-08

A malicious Python package can now steal your CI secrets at install time, before a single import ever runs.

• Storage Appliance Becomes Stealth Pivot Into M365
• Instagram Recovery Became the Takeover Path
• WordPress Form Bug Hands Out Admin Access
• Package Installs Now Trigger Cross-Ecosystem Theft
• Transitive protobuf.js Pulls Expand RCE Exposure
• IT-Helpdesk Impersonation Replaces Ransomware Noise
• World Cup Fraud Is Already Parked and Ready
• Support Channels Become the Access Point for Extortion
• Botnet Swaps Payloads Across IoT Hardware
• Ceasefire Leaves PLC Footholds Inside Critical Infrastructure
• Default Gogs Installs Expose Private Repos to Anyone
• AI Brand Lures Turn Search Trust Into Credential Theft

Recent editions

• Sunday, June 7, 2026: WordPress Form Bug Hands Out Admin Access · 7 stories
• Saturday, June 6, 2026: WordPress Form Bug Hands Out Admin Access · 9 stories
• Friday, June 5, 2026: WordPress Form Bug Hands Out Admin Access · 15 stories
• Thursday, June 4, 2026: WordPress Form Bug Hands Out Admin Access · 17 stories
• Wednesday, June 3, 2026: New Kirki Release Put Admin Accounts at Risk · 18 stories
• Tuesday, June 2, 2026: AI Shortens the EDR Bypass Loop · 6 stories
• Monday, June 1, 2026: Support Access Becomes a WordPress Admin Backdoor · 4 stories