Cybersecurity briefing — 2026-06-20

• Gravity SMTP Bug Exposes Mail-Sending Credentials
• SocGholish Takedown Leaves Reinfectable CMS Estates
• Patched FortiGates Still Accept Leaked Logins
• OAuth Breach Turns One App Into Multi-Tenant Salesforce Theft
• Ransomware Affiliates Now Rent Kernel-Grade Evasion
• USB Worms Now Hide Behind Tor
• Ransomware Hides Behind Trusted Remote Access
• Metasploit Turns Paperclip AI Into a Live Target
• UK CNI Defense Shifts to Shared Digital Space
• Trusted Microsoft Links Can Smuggle Copilot Prompts
• Fake Reputation Now Sells Crypto Malware