patch1 source
Microsoft fixes KB5089549 Windows security update install issues
Microsoft has resolved a known issue causing installation failures and 0x800f0922 errors when deploying the May 2026 Windows 11 security update KB5089549.
Jun 1, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,965 stories synthesized.
breach1 source
Iran-Linked Hackers Wipe IT Systems, Backups, and Recovery Infrastructure in Multi-Victim Campaign
Iran-linked hackers operating as 'Ababil of Minab' have destroyed IT systems, backups, and recovery infrastructure at multiple US and Middle East organizations, including LA Metro.
Jun 1, 2026
research3 sources
New DriveSurge Threat Actor Uses ClickFix and Fake Updates to Infect Website Visitors
Silent Push researchers have identified DriveSurge, a sophisticated threat actor using ClickFix social engineering and fake browser update pages to compromise thousands of legitimate websites.
Jun 1, 2026 · updated Jun 2, 2026
research2 sources · 3 CVEs
Securelist Report Maps Top Attack Vectors Targeting Docker and Kubernetes Environments
A new Securelist report breaks down the primary attack vectors targeting Docker and Kubernetes environments, highlighting real-world exploitation by APT groups like TeamPCP and detailing supply-chain compromises, container escape attempts, and orchestration API abuse.
Jun 1, 2026
trend3 sources
Microsoft Investigates MFA Setup Failure and MySigns-In Portal Outage
Microsoft is investigating an outage affecting MFA enrollment and the mysignins.microsoft.com portal, potentially blocking users under Conditional Access policies.
Jun 1, 2026
advisory1 source · 16 CVEs
Apache Airflow: 17 Vulnerabilities Disclosed on June 1, 2026
Key findings • 17 Apache Airflow vulnerabilities disclosed on June 1, 2026, impacting multiple components. • Issues include authentication bypass, sensitive data exposure, and improper author…
Jun 1, 2026 · updated Jun 2, 2026
advisory1 source · 7 CVEs
Soplanning: Seven Vulnerabilities Disclosed, Including SQLi and Auth Bypass
Key findings • Seven vulnerabilities disclosed for Soplanning v1.55 and below on June 1, 2026. • Critical SQL injection (CVE-2026-40546) allows full database control. • High-severity auth…
Jun 1, 2026 · updated Jun 3, 2026
1 source
Jeecgboot: Three SSRF Vulnerabilities Disclosed Together
Key findings • Three medium-severity SSRF vulnerabilities disclosed in Jeecgboot. • Vulnerabilities affect Jeecgboot versions up to 3.9.1 and 3.9.2. • CVE-2026-10240 and CVE-2026-10239 ha…
Jun 1, 2026 · updated Jun 3, 2026
advisory1 source · 10 CVEs
Assimp: Ten Memory-Safety CVEs Disclosed Across Half-Life MDL, glTF, and FBX Parsers
Key findings • Ten memory-safety CVEs disclosed together in Assimp up to v6.0.4 • Five bugs in the Half-Life 1 MDL loader, including four heap buffer overflows • Four null pointer derefer…
Jun 1, 2026
advisory1 source
Microsoft Mandates Explicitly Registered Authentication Methods for Entra ID Password Resets
Microsoft will require explicitly registered authentication methods for Entra ID Self-Service Password Reset, removing reliance on unverified directory-stored contact info, with enforcement starting September 7, 2026.
Jun 1, 2026
patch3 sources · 1 CVE
Palo Alto Networks Warns of Actively Exploited High-Severity PAN-OS Vulnerability
Palo Alto Networks has issued an urgent warning that a high-severity vulnerability in its PAN-OS firewall operating system is being actively exploited in the wild, with hotfixes now available.
Jun 1, 2026 · updated Jun 15, 2026
breach1 source
Famous Chollima Hackers Hide Malware in Legitimate Packagist Package to Target PHP Developers
North Korean threat group Famous Chollima compromised a legitimate PHP package on Packagist, hiding a JavaScript malware loader that retrieves encrypted payloads from blockchain transactions.
Jun 1, 2026
advisory1 source · 4 CVEs
MediaTek Discloses Four CVEs: Three GenieZone TEE Bugs and a WLAN Driver Overflow
MediaTek disclosed four vulnerabilities on June 1, 2026, including three out-of-bounds write flaws in the GenieZone TEE and a heap buffer overflow in the WLAN AP driver, all with patches available.
Jun 1, 2026
advisory1 source · 5 CVEs
Five Remote Flaws Disclosed in Tenda W12 Router — Four Stack Buffer Overflows, Public Exploits Available
Five vulnerabilities, including four stack-based buffer overflows, were disclosed for the Tenda W12 router, all remotely exploitable with public exploit code already circulating.
Jun 1, 2026
advisory1 source · 8 CVEs
Code-Projects: Eight SQLi CVEs Across Five Apps Disclosed With Public Exploits
Key findings • Eight SQL injection CVEs disclosed across five code-projects applications in a 48-hour window • Public exploit code is available for all eight vulnerabilities • Three of th…
Jun 1, 2026
research1 source
OWASP Releases Agent Memory Guard to Defend AI Agents Against Memory Poisoning Attacks
OWASP has released Agent Memory Guard, an open-source runtime defense layer that protects AI agents from memory poisoning attacks targeting persistent stores like conversation history and vector databases.
Jun 1, 2026
breach11 sources
Instagram Meta AI Flaw Let Attackers Hijack High-Value Accounts by Tricking Chatbot Into Sending Password Reset Codes
A logic-layer vulnerability in Instagram's Meta AI account recovery tool allowed attackers to hijack premium short-handle accounts by tricking the chatbot into forwarding password reset codes without any identity verification.
Jun 1, 2026 · updated Jun 8, 2026
kev4 sources · 5 CVEs
Windows Netlogon 0-Click RCE Vulnerability Now Actively Exploited In The Wild
CVE-2026-41089, a critical 0-click RCE in Windows Netlogon, is under active exploitation, enabling unauthenticated attackers to take over domain controllers with SYSTEM privileges.
Jun 1, 2026
research2 sources
SmartApeSG ClickFix Campaign Delivers NetSupport RAT via Unidentified Initial Dropper
Researchers detail an infection chain starting with an unidentified RAT that delivered a NetSupport Manager RAT payload through the SmartApeSG ClickFix campaign.
Jun 1, 2026
research1 source
Pwn2Own Berlin 2026 Shatters Records with 47 Zero-Days, AI Security Takes Center Stage
The Pwn2Own Berlin 2026 hacking competition saw a record $1.29 million awarded for the exploitation of 47 zero-day vulnerabilities, with AI-powered targets and tools dominating the event.
Jun 1, 2026
3 sources · 2 CVEs
Oracle WebLogic Server Flaw CVE-2024-21182 Added to CISA KEV Under Active Exploitation
Key findings • CISA added Oracle WebLogic Server vulnerability CVE-2024-21182 to its KEV catalog on June 1, 2026. • The flaw allows unauthenticated attackers to compromise WebLogic servers vi…
Jun 1, 2026 · updated Jun 2, 2026
1 source
npm: 32 Official '@redhat-cloud-services' Packages Hijacked in Coordinated Scope Compromise
Key findings • 32 legitimate packages under the @redhat-cloud-services npm scope were simultaneously compromised • Affected packages include high-download libraries active for over 7 years, s…
Jun 1, 2026 · updated Jun 2, 2026
breach4 sources
SideCopy APT Targets Afghanistan Finance Ministry With XenoRAT in Operation XENOFISCAL
Pakistan-linked SideCopy APT targeted Afghanistan's Ministry of Finance with XenoRAT malware, compromising all 34 provincial finance directorates via spear-phishing emails.
May 31, 2026 · updated Jun 4, 2026
research1 source
Unidentified Hacker Group Targets Russian Maritime Universities, Diplomatic Missions for Nearly Two Years
A previously unknown hacking group has been quietly targeting Russian maritime universities, energy facilities, diplomatic missions, and government agencies for nearly two years, researchers at Kaspersky revealed.
May 31, 2026 · updated Jun 1, 2026