Cybersecurity briefing, 2026-06-15

Rotating credentials does nothing when the attacker already owns the code that decides who gets to log in.

• Stolen CDN Keys Turn Plugin Scripts Into Backdoors
• Payroll Leak Puts People, Not Systems, at Risk
• Login Software Became Velvet Ant’s Persistence Layer
• Trusted Microsoft Links Can Smuggle Copilot Prompts
• Developer Tools Now Deliver Cross-Platform Malware
• Sugar Outage Shifts to Leak and Extortion Risk
• AUR Builds Become the Payload Path
• Port Ransomware Reaches Through Cloud Identity

Recent editions

• Sunday, June 14, 2026: Splunk’s Control Plane Is Now the Target · 2 stories
• Saturday, June 13, 2026: Splunk’s Control Plane Is Now the Target · 9 stories
• Friday, June 12, 2026: AI Mass-Produces Phishing Faster Than Defenses Can Block · 17 stories
• Thursday, June 11, 2026: Netlogon Exploit Puts Active Directory at Risk · 13 stories
• Wednesday, June 10, 2026: Netlogon Exploit Puts Active Directory at Risk · 13 stories
• Tuesday, June 9, 2026: WinRAR Patched, But Ukraine Is Still Getting Hit · 15 stories
• Monday, June 8, 2026: Storage Appliance Becomes Stealth Pivot Into M365 · 12 stories