Cybersecurity briefing — 2026-06-19

• Ransomware Affiliates Now Rent Kernel-Grade Evasion
• Exposed Staging Server Shows Perimeter Breaches Spreading Inward
• Trusted Plugin Updates Became the Payload
• USB Worms Now Hide Behind Tor
• Leaked Fortinet Credentials Turn Edge Access Persistent
• Metasploit Turns Paperclip AI Into a Live Target
• Mastra Packages Turn npm Install Into Malware Delivery
• ISE Admin Access Can Become OS Takeover
• Apple’s Relay Domain Becomes a Shared Failure Point
• Sponsored Downloads Become the Infection Path
• Beats Buds Stay Vulnerable Until They Reconnect
• Splunk Admin Helper Breaks Out to Host Commands
• Legacy Azure AD Recon Finally Leaves a Trace