Security Bulletin

Tonga's National Health Information System and its Ministry of Health's website were confirmed to be taken down by a ransomware attack on June 15, according to The Record, a news site by cybersecurity firm Recorded Future.

Major Russian retailers Lenta, Miratorg, and Yandex Lavka have disclosed significant dairy supply chain disruptions after the country's Mercury platform used for animal-based product certification was downed by a cyberattack earlier last week...

North Korean hacking collective Lazarus Group was accused by Taiwan-based cryptocurrency exchange BitoPro of having perpetrated an $11 million cryptocurrency heist earlier last month, BleepingComputer reports.

Widely used cryptocurrency price tracking site CoinMarketCap had $43,266 worth of cryptocurrency pilfered from 110 victims following a Friday attack that involved the Inferno Drainer crypto-draining tool, according to Hackread.

Newly emergent threat operation Mocha Manakin has leveraged the ClickFix attack technique to deploy the novel NodeInitRAT malware as part of an attack campaign initially observed earlier this year, reports Cyber Security News.

In a market where security budgets flatten while threats accelerate, improving analyst throughput is fiscal stewardship.

This blog explores how mathematics and algorithms form the hidden engine behind intelligent agent behavior. While agents appear to act smartly, they rely on rigorous mathematical models and… Read more on Cisco Blogs

What’s New in MCP 2025-06-18: Human-in-the-Loop, OAuth, Structured Content, and Evolving API Paradigms The latest release of the Model Context Protocol (MCP) — dated 2025-06-18 — introduces powerful e… Read more on Cisco Blogs

The UK’s new Industrial Strategy charts a bold and necessary path toward long-term economic renewal—anchored in innovation, digital infrastructure, and the transformative potential of Artificial Int… Read more on Cisco Blogs

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Ehsaan Mavani talks about Alternate Data Streams (ADS) in diary entry " Alternate Data Streams ? Adversary Defense Evasion and Detection [Guest Diary]".

At this week's re:Inforce 2025 conference, the cloud giant introduced new capabilities to several core security products to provide customers with better visibility and more context on potential threats.