Cybersecurity briefing — 2026-06-23

• Embedded FFmpeg Decoder Exposes More Than Media Players
• Federal PQC Moves From Guidance to Deadlines
• Trusted Plugin Updates Became the Payload
• Outbound Traffic Is the Missing Cloud Control
• Frontier AI Meets Broken Basics
• Stolen Vendor Tokens Open Customer Salesforce Data
• FortiGate Admin Access Becomes Credential Theft
• Infected Routers Become a Hidden Scanning Fabric
• Gravity SMTP Bug Exposes Mail-Sending Credentials
• Microsoft 365 Collaboration Becomes the New Phishing Path
• Stolen Logins Now Come as Targeted Shortlists
• Ransomware Affiliates Rent Kernel-Grade EDR Killing
• Dify’s tenant boundary leaks chats and files
• Supplier Breach Reaches OEM Trust Chain
• WhatsApp Trust Now Delivers Remote Control
• FortiBleed Becomes a Credential-Resale Problem
• SocGholish Takedown Exposes the Hidden Delivery Layer
• AI Shrinks the Window for Exposed Assets
• False Extreme Alerts Shatter Trust in Brazil
• SINEC INS Can Let Login Become OS Control