Security Bulletin

The exposed database, weighing approximately 8 terabytes, was compiled from 36 different sources, including Telegram channels, previous data breach collections, and data exported from live servers.

The program, a collaboration between the Executive Office of Technology Services and Security and the Community Compact Cabinet, provides funding to address risks identified through the Cybersecurity Health Check Program.

The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day deadline.

And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare.

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

The attack exploited a weakness in how the SDK selected temporary Cloud Storage buckets for model uploads.

Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of compromised devices.

The attack involved the compromise of an npm account, which then mass-published over 140 malicious packages under the Mastra scope.

The change, announced to developers, will move anonymously generated email addresses to a new domain, @private.icloud.com.

Check Point Research reported that in May 2026, the hospitality, travel, and recreation sector faced an average of 2,291 weekly cyberattacks per organization, a 24% increase from the previous month and more than double the volume seen in May 2023.

Malicious build scripts deploy a Rust-based infostealer and eBPF rootkit.

AI-powered attackers are turning trust into a core cyberattack target.