Security news.
Today's cybersecurity landscape is marked by critical vulnerabilities and widespread credential compromises, alongside ongoing discussions about AI's impact on security teams and threat management. CISA has issued urgent warnings for actively exploited flaws in Splunk Enterprise and exposed Fortinet device credentials, underscoring the need for immediate patching and device hardening.
CISA: Splunk Enterprise Flaw Actively Exploited, Patch by Sunday
CISA has urged U.S. federal agencies to patch a critical Splunk Enterprise vulnerability (CVE-2026-20253) by Sunday due to active exploitation for unauthenticated remote code execution.
FortiBleed: 86,000 Fortinet Device Credentials Compromised
A large-scale credential theft campaign, dubbed "FortiBleed," has compromised approximately 86,000 Fortinet firewall and VPN device credentials, prompting CISA to warn users to secure their devices.
Cybersecurity Firms Impacted by Klue Supply Chain Attack
A supply chain attack targeting market intelligence platform Klue led to the exfiltration of data from Salesforce instances of its customers, including cybersecurity vendors Huntress and Recorded Future.
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
Apple has released an update for Beats Studio Buds to fix a high-severity vulnerability (CVE-2025-20701) that could allow nearby attackers to eavesdrop on users by pairing a Bluetooth audio device without consent.
CryptoBandits Malware Doubles as a Backdoor, Abuses Tor
The CryptoBandits malware is functioning as both a data theft tool and a backdoor, utilizing a local SOCKS5 proxy and Tor for traffic routing and remote code execution.
Gentlemen Ransomware Uses Multiple EDR Killers to Disable Defenses
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help its affiliates evade detection during attacks.
From Assistive to Agentic: The AI Shift That's Redefining Threat Management
The cybersecurity industry is seeing a shift towards "agentic AI" in threat management, aiming to address the challenges of siloed security tools and analyst burnout by enabling more autonomous threat response.
Microsoft: June 2026 Windows Updates Break Recycle Bin Prompts
Microsoft has confirmed a bug in its June 2026 Windows updates that causes incorrect filenames to appear in the Recycle Bin confirmation dialog when deleting files.