Cybersecurity briefing, 2026-06-10

• Netlogon exploit puts Active Directory at risk
• WinRAR patched, but Ukraine is still getting hit
• Langflow bug turns AI builder into server write surface
• ServiceNow ticket data may have exposed standing secrets
• Microsoft GitHub repos hit through trusted maintainer paths
• Commodity session theft targets crypto wallets
• Transitive protobuf.js pulls expand RCE exposure
• Repo cleanup may not have stuck
• Cloud logs can now be blinded or rerouted
• Commodity local AI now powers self-replicating worms
• Apple lets AI rewrite your passwords
• Serial numbers become login keys in KACO inverters
• Romance lures turn Soldiers’ phones into spy gear

Recent editions

• Tuesday, June 9, 2026: Storage appliance becomes stealth pivot into M365 · 15 stories
• Monday, June 8, 2026: Instagram recovery became the takeover path · 12 stories
• Sunday, June 7, 2026: WordPress form bug hands out admin access · 7 stories
• Saturday, June 6, 2026: AI bug hunts are swamping human triage · 9 stories
• Friday, June 5, 2026: IT-helpdesk impersonation replaces ransomware noise · 15 stories
• Thursday, June 4, 2026: New Kirki release put admin accounts at risk · 17 stories
• Wednesday, June 3, 2026: Encrypted vault copies outlive the lockout · 18 stories