Cybersecurity briefing, 2026-06-27

• Repo Opens Became Live Cloud Compromise
• Bespoke Backdoor Marks CL-STA-1062’s Next Stage
• Signal Phishing Now Steals the Restore Key
• Public Exploits Now Feed a Custom Cobalt Strike Loader
• FCC Expands Cybersecurity Rules to Alerting and Cable Gates
• Turla Reuses KAZUAR to Extend Its Espionage Platform
• Joomla Plugin Upload Feature Becomes Server Takeover Path
• One Breached Maintainer Reaches npm, Go, and Actions
• Trusted Salesforce Access Became the Blast Radius
• Supplier Breach Turns Polymarket Site Into Theft Point
• Criminal Malware Assembly Lines Are Being Torn Down
• Recovery Keys Let Messaging Account Theft Persist
• Europe’s Ransomware Surge Reaches Suppliers
• AI Patching Shifts the Bottleneck to Review

Recent editions

• Friday, June 26, 2026: Bespoke Backdoor Marks CL-STA-1062’s Next Stage · 17 stories
• Thursday, June 25, 2026: Internet-Facing PeopleSoft Console Becomes Extortion Foothold · 17 stories
• Wednesday, June 24, 2026: Internet-Facing PeopleSoft Console Becomes Extortion Foothold · 19 stories
• Tuesday, June 23, 2026: Embedded FFmpeg Decoder Exposes More Than Media Players · 20 stories
• Monday, June 22, 2026: Trusted Plugin Updates Became the Payload · 16 stories
• Sunday, June 21, 2026: Infected Routers Become a Hidden Scanning Fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP Bug Exposes Mail-Sending Credentials · 11 stories