Cybersecurity briefing, 2026-06-12

• AI Mass-Produces Phishing Faster Than Defenses Can Block
• UPS Cards Become a Power-Control Risk
• KYC Records Turn Laundering Hub Into Evidence
• One Poisoned Dependency Can Backdoor Agent Frameworks
• AI Email Agents Can Be Tricked Into Bulk Exfiltration
• Observability Output Becomes a Command Channel
• Free Phishing Platform Takedown Leaves Stolen Data Behind
• Shared Credentials Put Yarbo Fleets Under One Key
• RTKBase Credentials Turned a Water Leak Into Pivot Risk
• APT28’s tooling is now disposable
• Student Records Breach Exposes Durable Identity Data
• Phishing Volume Falls as Targeted Lures Rise
• npm Ends Default Trust in Dependency Scripts
• AUR Builds Become the Payload Path
• LangGraph Checkpoints, Not Agents, Are the Weak Link
• Langflow Bug Turns AI Builder Into Server Write Surface
• Patches Leave Dependency Risk Behind

Recent editions

• Thursday, June 11, 2026: Netlogon Exploit Puts Active Directory at Risk · 13 stories
• Wednesday, June 10, 2026: Netlogon Exploit Puts Active Directory at Risk · 13 stories
• Tuesday, June 9, 2026: WinRAR Patched, But Ukraine Is Still Getting Hit · 15 stories
• Monday, June 8, 2026: Storage Appliance Becomes Stealth Pivot Into M365 · 12 stories
• Sunday, June 7, 2026: WordPress Form Bug Hands Out Admin Access · 7 stories
• Saturday, June 6, 2026: WordPress Form Bug Hands Out Admin Access · 9 stories
• Friday, June 5, 2026: WordPress Form Bug Hands Out Admin Access · 15 stories