Cybersecurity briefing, 2026-06-29

• Oracle Payments bug can leak the keys behind it
• Gamaredon builds persistence through cloud and WinRAR abuse
• Forged technician logins put RMM fleets at risk
• Recovery Keys turn chat phishing into persistent access
• Signal phishing now steals the restore key
• AI pushes vulnerability work past human pace
• Frontier AI access now runs through Washington
• Geofence requests lose their easy path
• Signed SzafirHost archives can hide unchecked native code
• n8n flaws break workflow trust across roles
• Admin tool search leads to domain-wide ransomware
• Trusted cloud traffic becomes covert espionage channel
• Russia’s influence machine outgrew Ukraine

Recent editions

• Sunday, June 28, 2026: Recovery keys let messaging account theft persist · 1 story
• Saturday, June 27, 2026: Repo opens became live cloud compromise · 14 stories
• Friday, June 26, 2026: Bespoke backdoor marks CL-STA-1062’s next stage · 17 stories
• Thursday, June 25, 2026: Internet-facing PeopleSoft console becomes extortion foothold · 17 stories
• Wednesday, June 24, 2026: Criminal malware assembly lines are being torn down · 19 stories
• Tuesday, June 23, 2026: Embedded FFmpeg decoder exposes more than media players · 20 stories
• Monday, June 22, 2026: Trusted plugin updates became the payload · 16 stories