One Click On microsoft.com. Your Inbox Walked.
SearchLeak proved one click on microsoft.com can drain a Copilot tenant. Here's how to lock down the AI surface your cybersecurity team just bought.
June 2026
The Fake Sentry Error That Ran Your Code
Agentjacking turns Sentry error reports into prompt injection payloads that hijack AI coding agents. Here's the cybersecurity fix that actually scales.
Court Orders Apparently Aren’t A Security Control
NSO defied a court order, North Korea pads its GDP with hacking, and TikTok ships infostealers. Time to rewrite your cybersecurity assumptions.
China Built A Faster Shodan From Home Routers
China's JDY botnet is mapping your attack surface from 1,500 home routers, and Langflow shows where the intel lands. Audit your edge before they do.
Ransomware Affiliates Now Take 90 Percent. Infostealers Feed The Pipeline.
The Gentlemen pay affiliates 90 percent. Infostealers harvest your users' logins. See the cybersecurity moves that actually cut the pipeline.
UNC3753 Called Your Help Desk. Then It Walked In.
UNC3753 paired vishing with physical office intrusions to extort dozens of US firms. Here's what your cybersecurity playbook is missing this week.
Your Smart TV Is Now A Proxy Node
A Bright Data SDK turns smart TVs into proxy exit nodes and the 2026 DBIR puts attacks in the browser. Time to rethink your cybersecurity signals.
Worms Are Back, And They Brought Their Own LLM
An AI worm prototype, two npm worm campaigns, and a Claude Code GitHub Action flaw rewrite the cybersecurity worm playbook. Here's what to fix this week.
Three CVEs Stack To Root On Cisco’s SD-WAN Manager
Cisco's CVE-2026-20245 SD-WAN zero-day needs netadmin first. Two earlier CVEs hand it over. Contain the chain before the patch ships.
Agentic AI Failed Seven New Ways This Year
Microsoft's updated agentic AI failure mode taxonomy names seven new cybersecurity risks defenders need to map to controls now. See what to do next.