Cybersecurity briefing, 2026-06-30

Your AI coding assistant runs the repo before you read it.

• Oracle Payments Bug Can Leak the Keys Behind It
• Gamaredon Builds Persistence Through Cloud and WinRAR Abuse
• Defender Flaw Becomes Ransomware’s Privilege Shortcut
• Exposed Langflow Apps Become Network Pivots
• Recovery Keys Turn Chat Phishing into Persistent Access
• AI Pushes Vulnerability Work Past Human Pace
• AWS WAF Can Miss Fragmented HTTP/2 Bodies
• Edge ADC Bug Lets Unauth Caller Become the Perimeter
• Repo Opens Became Live Cloud Compromise
• AI-Branded Extension Quietly Harvested Search Traffic
• Poisoned AI Tools Turn Agents Into Control Planes
• Agentic Browsers Leak Secrets When Context Is Faked
• Admin Tool Search Leads to Domain-Wide Ransomware
• Management Console XXE Exposes Server-Side Files
• Installer Abuse Bypasses Chromium Extension Trust
• Russia’s Influence Machine Outgrew Ukraine
• MISP Flaws Let Users Cross Org Boundaries

Recent editions

• Monday, June 29, 2026: Oracle Payments Bug Can Leak the Keys Behind It · 13 stories
• Sunday, June 28, 2026: Recovery Keys Let Messaging Account Theft Persist · 1 story
• Saturday, June 27, 2026: Repo Opens Became Live Cloud Compromise · 14 stories
• Friday, June 26, 2026: Bespoke Backdoor Marks CL-STA-1062’s Next Stage · 17 stories
• Thursday, June 25, 2026: Internet-Facing PeopleSoft Console Becomes Extortion Foothold · 17 stories
• Wednesday, June 24, 2026: Internet-Facing PeopleSoft Console Becomes Extortion Foothold · 19 stories
• Tuesday, June 23, 2026: Embedded FFmpeg Decoder Exposes More Than Media Players · 20 stories