Cybersecurity briefing, 2026-06-19

• Ransomware Affiliates Rent Kernel-Grade EDR Killing
• Exposed Staging Server Shows Perimeter Breaches Spreading Inward
• Trusted Plugin Updates Became the Payload
• USB Worms Now Hide Behind Tor
• Leaked Fortinet Credentials Turn Edge Access Persistent
• Metasploit Turns Paperclip AI Into a Live Target
• North Korea Attribution Expands Mastra Poisoning Risk
• ISE-PIC Patch Paths Now Depend on Version
• Apple’s Relay Domain Becomes a Shared Failure Point
• Sponsored Downloads Become the Infection Path
• Beats Buds Stay Vulnerable Until They Reconnect
• Splunk Admin Helper Breaks Out to Host Commands
• Legacy Azure AD Recon Finally Leaves a Trace

Recent editions

• Thursday, June 18, 2026: Trusted Plugin Updates Became the Payload · 17 stories
• Wednesday, June 17, 2026: Port Ransomware Reaches Through Cloud Identity · 16 stories
• Tuesday, June 16, 2026: Port Ransomware Reaches Through Cloud Identity · 19 stories
• Monday, June 15, 2026: Stolen CDN Keys Turn Plugin Scripts Into Backdoors · 8 stories
• Sunday, June 14, 2026: Splunk’s Control Plane Is Now the Target · 2 stories
• Saturday, June 13, 2026: Splunk’s Control Plane Is Now the Target · 9 stories
• Friday, June 12, 2026: AI Mass-Produces Phishing Faster Than Defenses Can Block · 17 stories