Cybersecurity briefing, 2026-06-23

• Embedded FFmpeg Decoder Exposes More Than Media Players
• PQC Deadlines Now Reach Vendor Contracts
• Trusted Plugin Updates Became the Payload
• Outbound Traffic Is the Missing Cloud Control
• Frontier AI Meets Broken Basics
• Trusted Salesforce Access Became the Blast Radius
• FortiGate Compromise Becomes a Resale Pipeline
• Infected Routers Become a Hidden Scanning Fabric
• Gravity SMTP Bug Exposes Mail-Sending Credentials
• Microsoft 365 Collaboration Becomes the New Phishing Path
• Stolen Logins Now Come as Targeted Shortlists
• Ransomware Affiliates Rent Kernel-Grade EDR Killing
• Dify’s tenant boundary leaks chats and files
• Supplier Breach Reaches OEM Trust Chain
• WhatsApp Trust Now Delivers Remote Control
• FortiBleed Becomes a Credential-Resale Problem
• SocGholish Takedown Exposes the Hidden Delivery Layer
• AI Shrinks the Window for Exposed Assets
• False Extreme Alerts Shatter Trust in Brazil
• SINEC INS Can Let Login Become OS Control

Recent editions

• Monday, June 22, 2026: Trusted Plugin Updates Became the Payload · 16 stories
• Sunday, June 21, 2026: Infected Routers Become a Hidden Scanning Fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP Bug Exposes Mail-Sending Credentials · 11 stories
• Friday, June 19, 2026: Ransomware Affiliates Rent Kernel-Grade EDR Killing · 13 stories
• Thursday, June 18, 2026: Trusted Plugin Updates Became the Payload · 17 stories
• Wednesday, June 17, 2026: Port Ransomware Reaches Through Cloud Identity · 16 stories
• Tuesday, June 16, 2026: Port Ransomware Reaches Through Cloud Identity · 19 stories