Today’s Topics: Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity Threat actors linked through tactics, infrastructure, and public claims to the ShinyHunters data-extortion operation spent much of the past year gaining access to corporate Salesforce environments without exploiting a vulnerability in the platform itself. Their access came through trust relationships…

Today’s Topics: ATM Jackpotting Shows Why Encryption Wrappers Cannot Be Treated as a Final Defense ATM security often looks stronger from the outside than it is at the computing layer. The vault section is physically hardened, cash cassettes are protected, and forced entry into the lower half of the machine is difficult by design. The…

Today’s Topics: BioShocking Shows Why AI Browsers Turn Prompt Injection Into Account Access AI browsers change the risk model for web security. A normal browser displays pages, runs site code inside web security boundaries, and leaves most decisions to the user. An AI browser in agent mode can read, click, type, summarize, follow links, interact…

Today’s Topics: Squidbleed Shows Why Old Proxy Code Still Belongs in the Threat Model Squidbleed is the kind of vulnerability that looks small in code and much larger in an environment diagram. Tracked as CVE-2026-47729, the flaw is an out-of-bounds read in Squid’s FTP gateway that can leak fragments of proxy memory back to a…

Today’s Topics: INTERPOL Warns Cybercrime Is Surging Across Asia-Pacific as Phishing, Ransomware, and AI Scams Scale Up Cybercrime is rising sharply across Asia and the South Pacific, with phishing, ransomware, banking malware, information stealers, deepfakes, and AI-assisted fraud placing new pressure on governments, businesses, and law enforcement agencies across the region. A new INTERPOL assessment…

Today’s Topics: Self-Replicating AI Worm Shows Malware Can Reason Its Way Through a Network University of Toronto researchers have demonstrated a proof-of-concept AI worm that changes one of the oldest assumptions in worm defense: that the malware arrives with a fixed exploit path. In a preprint posted to arXiv on June 2, a team from…

Today’s Topics: LLM Agent Used in Post-Exploitation Attack After Marimo Vulnerability Exploit A threat actor was observed using a large language model agent to conduct post-exploitation activity after compromising a publicly exposed Marimo notebook through CVE-2026-39987, a critical pre-authenticated remote code execution vulnerability affecting Marimo versions up to and including 0.20.4. The activity, reported by…

Today’s Topics: GitHub Investigates Internal Repository Breach After Employee Device Compromise GitHub is investigating unauthorized access to its internal repositories after the threat actor known as TeamPCP listed what it claimed to be GitHub source code and internal organization data for sale on a cybercrime forum. The Microsoft-owned platform said it has not found evidence…

Today’s Topics: Congress Presses Instructure After Canvas Breach Congress is pressing Instructure for answers after the company’s Canvas learning management system was disrupted by a cyberattack that exposed user information, interrupted core school functions, and raised new questions about how well major education technology providers can contain repeat intrusions. The incident follows a pattern we…