ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories 2026-06-25 at 15:24 By It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy crap, browser […]
Cal Water Finds No Evidence of OT Activity After Hackers Claimed They Could Disrupt Water Supply 2026-06-25 at 15:07 By Eduard Kovacs Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala. The post Cal Water Finds No Evidence of OT Activity After Hackers Claimed They Could Disrupt Water
Hackers Exposed Knicks, Madison Square Garden Data 2026-06-25 at 15:00 By Security leaders discuss the release of Knicks and Madison Square Garden customer and corporate data. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
Hackers Exposed Knicks, Madison Square Garden Data Read More »
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning 2026-06-25 at 14:23 By Eduard Kovacs The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project. The post Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning appeared first on SecurityWeek. This article
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning Read More »
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR 2026-06-25 at 14:17 By Despite the abundance of telemetry at analysts’ disposal, many security operations teams struggle to answer a few basic questions during incident investigation: What happened? What evidence do we have? How do we know we’re seeing it all, in context? Answering
Surviving the Mythos Era: Richard Bejtlich on the Case for NDR Read More »
GitLab Patches Code Execution, Information Disclosure Vulnerabilities 2026-06-25 at 14:10 By Ionut Arghire The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects. The post GitLab Patches Code Execution, Information Disclosure Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
GitLab Patches Code Execution, Information Disclosure Vulnerabilities Read More »
Hacker gets 18 months for attack that compromised 60,000 betting accounts 2026-06-25 at 13:18 By Sinisa Markovic A 21-year-old man known online as “Snoopy” was sentenced to 18 months in prison for his role in a scheme that hacked user accounts on a fantasy sports and betting website and sold access to them, causing hundreds
Hacker gets 18 months for attack that compromised 60,000 betting accounts Read More »
Your DLP Incident Backlog Owes You Closure 2026-06-25 at 13:00 By Namrata Shiggaon , Abhishek Sardana, Bishnu Chaturvedi Automatic Remediation Tracking (ART) aligns your organization’s incident backlog with what’s actually happening today This article is an excerpt from SECURITY.COM View Original Source
Your DLP Incident Backlog Owes You Closure Read More »
SpyCloud automates threat investigations with new Research Agent 2026-06-25 at 12:45 By Industry News SpyCloud has announced the launch of SpyCloud Research Agent, a conversational AI investigation agent now available in its Cybercrime Investigations console. Cybercrime investigations have a tax: hours of manual pivot work that experienced analysts run by instinct and junior analysts struggle
SpyCloud automates threat investigations with new Research Agent Read More »
Iran-linked entities moved $3.8B through CoinEx, TRM says 2026-06-25 at 12:44 By Zoltan Vardai TRM Labs traced $3.8 billion moved by 60 sanctioned Iranian entities through CoinEx and said that the exchange’s 8% share of illicit transactions was substantially higher than its counterparts. This article is an excerpt from Cointelegraph.com News View Original Source
Iran-linked entities moved $3.8B through CoinEx, TRM says Read More »
Flare unveils new CTI capabilities and Okta support 2026-06-25 at 12:35 By Industry News Flare has announced the expanded capabilities for Flare CTI, and an Okta integration within its Identity Exposure Management (IEM) offering. These updates extend Flare’s identity expertise into tactical threat intelligence use cases and agentic workflows to reshape security operations. As security
Flare unveils new CTI capabilities and Okta support Read More »
Seemplicity AI Analysts focus remediation on exploitable risks 2026-06-25 at 12:27 By Industry News Seemplicity has launched AI Analysts for exposure management and response. The autonomous agents replace manual vulnerability triage by working directly within remediation workflows to conduct structured, evidence-based exploitability investigations. The old playbook is broken. AI-generated exploits have collapsed the window between
Seemplicity AI Analysts focus remediation on exploitable risks Read More »
25-Year-Old Vulnerability Patched in Curl 2026-06-25 at 12:25 By Ionut Arghire The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities. The post 25-Year-Old Vulnerability Patched in Curl appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
25-Year-Old Vulnerability Patched in Curl Read More »
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis 2026-06-25 at 12:23 By A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst’s artificial intelligence (AI) tools and trick it into aborting or refusing an analysis of the artifact.
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis Read More »
Entrust uses biometrics to verify users during high-risk transactions 2026-06-25 at 12:15 By Industry News Entrust has introduced a new approach to preventing account takeover. As attackers increasingly target high-risk moments like account recovery, device changes, and large transactions, organizations need to modernize authentication from verifying access to verifying the real human behind the transaction.
Entrust uses biometrics to verify users during high-risk transactions Read More »
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns 2026-06-25 at 11:54 By A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organizations spanning insurance, education, IT, and professional services sectors since April 2026. According to Symantec and Carbon Black’s Threat Hunter Team,
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns Read More »
Indonesia sets certification rules for influencers recommending crypto 2026-06-25 at 11:44 By Ezra Reguerra Indonesia’s financial regulator will require influencers recommending crypto and other digital assets to hold relevant certifications as regulators worldwide tighten oversight of finfluencers. This article is an excerpt from Cointelegraph.com News View Original Source
Indonesia sets certification rules for influencers recommending crypto Read More »
NIST Opens Updated IoT Security Guidance to Public Review 2026-06-25 at 11:29 By Ionut Arghire The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks. The post NIST Opens Updated IoT Security Guidance to Public Review appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
NIST Opens Updated IoT Security Guidance to Public Review Read More »
Polish crypto exchange Kanga secures MiCA license in Latvia 2026-06-25 at 11:24 By Helen Partz Poland-founded crypto exchange Kanga has secured a Class 3 MiCA license in Latvia, enabling EU-wide crypto services as Polish lawmakers debate framework’s implementation. This article is an excerpt from Cointelegraph.com News View Original Source
Polish crypto exchange Kanga secures MiCA license in Latvia Read More »
Chrome 149 Update Resolves 18 Severe Vulnerabilities 2026-06-25 at 10:56 By Ionut Arghire More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Update Resolves 18 Severe Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome 149 Update Resolves 18 Severe Vulnerabilities Read More »