Security Bulletin

The program, a collaboration between the Executive Office of Technology Services and Security and the Community Compact Cabinet, provides funding to address risks identified through the Cybersecurity Health Check Program.

The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day deadline.

And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare.

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

[This is a guest diary submitted by Varun Murdula]

AI can transform wireless management and operations, but it also accelerates security threats. But wireless security has also evolved: Modern standards like WPA3, available on Wi‑Fi 7, deliver stronger protection without adding operational burden.

The attack exploited a weakness in how the SDK selected temporary Cloud Storage buckets for model uploads.

Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of compromised devices.

The attack involved the compromise of an npm account, which then mass-published over 140 malicious packages under the Mastra scope.

The change, announced to developers, will move anonymously generated email addresses to a new domain, @private.icloud.com.

Check Point Research reported that in May 2026, the hospitality, travel, and recreation sector faced an average of 2,291 weekly cyberattacks per organization, a 24% increase from the previous month and more than double the volume seen in May 2023.

Malicious build scripts deploy a Rust-based infostealer and eBPF rootkit.