Cybersecurity briefing, 2026-06-20

• Gravity SMTP Bug Exposes Mail-Sending Credentials
• SocGholish Takedown Leaves Reinfectable CMS Estates
• FortiBleed Becomes a Credential-Resale Problem
• Trusted Salesforce Access Became the Blast Radius
• Ransomware Affiliates Rent Kernel-Grade EDR Killing
• USB Worms Now Hide Behind Tor
• Ransomware Hides Behind Trusted Remote Access
• Metasploit Turns Paperclip AI Into a Live Target
• UK CNI Defense Shifts to Shared Digital Space
• Trusted Microsoft Links Can Smuggle Copilot Prompts
• Fake Reputation Now Sells Crypto Malware

Recent editions

• Friday, June 19, 2026: Ransomware Affiliates Rent Kernel-Grade EDR Killing · 13 stories
• Thursday, June 18, 2026: Trusted Plugin Updates Became the Payload · 17 stories
• Wednesday, June 17, 2026: Port Ransomware Reaches Through Cloud Identity · 16 stories
• Tuesday, June 16, 2026: Port Ransomware Reaches Through Cloud Identity · 19 stories
• Monday, June 15, 2026: Stolen CDN Keys Turn Plugin Scripts Into Backdoors · 8 stories
• Sunday, June 14, 2026: Splunk’s Control Plane Is Now the Target · 2 stories
• Saturday, June 13, 2026: Splunk’s Control Plane Is Now the Target · 9 stories