Cybersecurity briefing, 2026-06-20

• Gravity SMTP bug exposes mail-sending credentials
• SocGholish takedown leaves reinfectable CMS estates
• FortiBleed becomes a credential-resale problem
• Trusted Salesforce access became the blast radius
• Ransomware affiliates rent kernel-grade EDR killing
• USB worms now hide behind Tor
• Ransomware hides behind trusted remote access
• Metasploit turns Paperclip AI into a live target
• UK CNI defense shifts to shared digital space
• Trusted Microsoft links can smuggle Copilot prompts
• Fake reputation now sells crypto malware

Recent editions

• Friday, June 19, 2026: Ransomware affiliates rent kernel-grade EDR killing · 13 stories
• Thursday, June 18, 2026: Trusted plugin updates became the payload · 17 stories
• Wednesday, June 17, 2026: Port ransomware reaches through cloud identity · 16 stories
• Tuesday, June 16, 2026: SprySOCKS gains a hidden Windows control channel · 19 stories
• Monday, June 15, 2026: Stolen CDN keys turn plugin scripts into backdoors · 8 stories
• Sunday, June 14, 2026: Splunk’s control plane is now the target · 2 stories
• Saturday, June 13, 2026: AUR builds become the payload path · 9 stories