Cybersecurity briefing, 2026-06-24

Patching your media server doesn't help if the same vulnerable decoder is bundled inside apps that never advertise it.

• Internet-facing PeopleSoft console becomes extortion foothold
• Criminal malware assembly lines are being torn down
• FortiGate compromise becomes a resale pipeline
• Dify’s tenant boundary leaks chats and files
• Standard Mac users can silence endpoint defenses
• Help desks became the new identity control plane
• Cloud seizure hits scam laundering backbone
• Klue token theft spreads beyond one Salesforce tenant
• Embedded FFmpeg decoder exposes more than media players
• Trusted CI workflows become the supply-chain weak point
• Microsoft 365 collaboration becomes the new phishing path
• PQC deadlines now reach vendor contracts
• False Extreme Alerts shatter trust in Brazil
• Agentic browsers leak secrets when context is faked
• GitHub checkout starts failing unsafe PR workflows
• Transitive npm trust becomes the attack surface
• AI patching shifts the bottleneck to review
• AI skills marketplace becomes a credential channel
• AI shrinks the window for exposed assets

Recent editions

• Tuesday, June 23, 2026: Embedded FFmpeg decoder exposes more than media players · 20 stories
• Monday, June 22, 2026: Trusted plugin updates became the payload · 16 stories
• Sunday, June 21, 2026: Infected routers become a hidden scanning fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP bug exposes mail-sending credentials · 11 stories
• Friday, June 19, 2026: Ransomware affiliates rent kernel-grade EDR killing · 13 stories
• Thursday, June 18, 2026: Trusted plugin updates became the payload · 17 stories
• Wednesday, June 17, 2026: Port ransomware reaches through cloud identity · 16 stories