Cybersecurity briefing, 2026-06-25

A standard Mac user can switch off your endpoint protection.

• Internet-Facing PeopleSoft Console Becomes Extortion Foothold
• Criminal Malware Assembly Lines Are Being Torn Down
• Standard Mac Users Can Silence Endpoint Defenses
• KongTuke’s stealth foothold now looks brokered
• Malware Now Targets the Analyst’s AI Triage
• Help Desks Became the New Identity Control Plane
• FortiGate Compromise Becomes a Resale Pipeline
• Unauthenticated Pickle on GPU Inference Port
• Trusted CI Workflows Become the Supply-Chain Weak Point
• Vendor Cutoff Failed to Stop Seized-Device Forensics
• Cloud Seizure Hits Scam Laundering Backbone
• Turla Reuses KAZUAR to Extend Its Espionage Platform
• Agentic Browsers Leak Secrets When Context Is Faked
• Malicious Extensions Now Cross Into Native Code
• AI Skills Marketplace Becomes a Credential Channel
• Residential IPs Are Becoming a Shared Crime Layer
• Market0Day Was Attack Infrastructure, Not a Listing Site

Recent editions

• Wednesday, June 24, 2026: Internet-Facing PeopleSoft Console Becomes Extortion Foothold · 19 stories
• Tuesday, June 23, 2026: Embedded FFmpeg Decoder Exposes More Than Media Players · 20 stories
• Monday, June 22, 2026: Trusted Plugin Updates Became the Payload · 16 stories
• Sunday, June 21, 2026: Infected Routers Become a Hidden Scanning Fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP Bug Exposes Mail-Sending Credentials · 11 stories
• Friday, June 19, 2026: Ransomware Affiliates Rent Kernel-Grade EDR Killing · 13 stories
• Thursday, June 18, 2026: Trusted Plugin Updates Became the Payload · 17 stories