Cybersecurity briefing, 2026-06-09

• WinRAR Patched, But Ukraine Is Still Getting Hit
• Storage Appliance Becomes Stealth Pivot Into M365
• CISA Ties Fastest Patches to Compromise Checks
• Romance Lures Turn Soldiers’ Phones into Spy Gear
• Commodity Local AI Now Powers Self-Replicating Worms
• Repo Cleanup May Not Have Stuck
• WordPress Form Bug Hands Out Admin Access
• IT-Helpdesk Impersonation Replaces Ransomware Noise
• PyPI Attackers Keep Reworking the Same Secret Stealer
• Default Gogs Installs Expose Private Repos to Anyone
• Transitive protobuf.js Pulls Expand RCE Exposure
• BitLocker Trust Break Follows Defender Offline Scan
• Public GPS Carried Military Key Control
• Apple Lets AI Rewrite Your Passwords
• RADIUS Reply Integrity Can Flip Switch Access

Recent editions

• Monday, June 8, 2026: Storage Appliance Becomes Stealth Pivot Into M365 · 12 stories
• Sunday, June 7, 2026: WordPress Form Bug Hands Out Admin Access · 7 stories
• Saturday, June 6, 2026: WordPress Form Bug Hands Out Admin Access · 9 stories
• Friday, June 5, 2026: WordPress Form Bug Hands Out Admin Access · 15 stories
• Thursday, June 4, 2026: WordPress Form Bug Hands Out Admin Access · 17 stories
• Wednesday, June 3, 2026: New Kirki Release Put Admin Accounts at Risk · 18 stories
• Tuesday, June 2, 2026: AI Shortens the EDR Bypass Loop · 6 stories