Cybersecurity briefing, 2026-06-23

• Embedded FFmpeg decoder exposes more than media players
• PQC deadlines now reach vendor contracts
• Trusted plugin updates became the payload
• Outbound traffic is the missing cloud control
• Frontier AI meets broken basics
• Trusted Salesforce access became the blast radius
• FortiGate compromise becomes a resale pipeline
• Infected routers become a hidden scanning fabric
• Gravity SMTP bug exposes mail-sending credentials
• Microsoft 365 collaboration becomes the new phishing path
• Stolen logins now come as targeted shortlists
• Ransomware affiliates rent kernel-grade EDR killing
• Dify’s tenant boundary leaks chats and files
• Supplier breach reaches OEM trust chain
• WhatsApp trust now delivers remote control
• FortiBleed becomes a credential-resale problem
• SocGholish takedown exposes the hidden delivery layer
• AI shrinks the window for exposed assets
• False Extreme Alerts shatter trust in Brazil
• SINEC INS can let login become OS control

Recent editions

• Monday, June 22, 2026: Trusted plugin updates became the payload · 16 stories
• Sunday, June 21, 2026: Infected routers become a hidden scanning fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP bug exposes mail-sending credentials · 11 stories
• Friday, June 19, 2026: Ransomware affiliates rent kernel-grade EDR killing · 13 stories
• Thursday, June 18, 2026: Trusted plugin updates became the payload · 17 stories
• Wednesday, June 17, 2026: Port ransomware reaches through cloud identity · 16 stories
• Tuesday, June 16, 2026: SprySOCKS gains a hidden Windows control channel · 19 stories