2026-06-10
Krebs on Security
Who Runs the Ransomware Group ‘The Gentlemen?’
Black Hills Info Sec
The Art of the Badge: A Hard Truth About Physical Security
MIT Technology Review
The Download: the “steroid olympics” and a safer Mythos
Schneier on Security
NSO Group Hacking WhatsApp Despite Court Order
Searchlight Cyber
June 10th – This Week’s Top Cybersecurity and Dark Web Stories
MIT Technology Review
The “steroid olympics” were a circus—and a window into our culture
Troy Hunt
Weekly Update 507
watchTowr Labs
More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
2026-06-09
Krebs on Security
A Record-Breaking Patch Tuesday for June 2026
Dark Reading
Blame AI: Patch Tuesday Hits Record 206 CVEs
Talos Intelligence
Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
Rapid7
Patch Tuesday - June 2026
Step Security
Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter
Ars Technica Security
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
The Citizen Lab
Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs of Bill C-8
Zero Day Initiative
The June 2026 Security Update Review
Microsoft Security
Reconstructing AI activity in investigations
Ars Technica Security
High-severity vulnerability in Linux caused by a single faulty character
Schneier on Security
GPS As a Key Distribution Platform
GitGuardian
Reliability Lessons From the Edges at SREday NYC
Rapid7
Rapid7 Gains Access To Anthropic’s Project Glasswing To Explore Frontier AI For Cybersecurity
Malwarebytes
Scammers love Meta, according to Lloyds Bank
MIT Technology Review
The Download: whole-body rejuvenation drugs and five things to know about AI
MIT Technology Review
Learning to lead in a hybrid human-AI enterprise
MIT Technology Review
David Sinclair plans to test whole-body rejuvenation drugs in the XPrize competition
MIT Technology Review
Five things you need to know about AI
Compass Security Blog
Entra Agent ID from a Security Perspective
TrustedSec
How to Train Your (Dragons) Analysts - A TrustedSec Guide to Picking the Perfect Purple Team
ISC SANS
ISC Stormcast For Tuesday, June 9th, 2026 https://isc.sans.edu/podcastdetail/9964, (Tue, Jun 9th)
Himanshu Anand
Defender playbook for the LLM era
Datadog HQ
Monitor Scaleway with Datadog
Datadog HQ
Monitor OVHcloud with Datadog
Datadog HQ
Monitor Nebius AI Cloud with Datadog
Datadog HQ
Start your day with the IDP Homepage
Datadog HQ
Improve AI agent quality with Bits Evals
2026-06-08
Amazon Security
ICYMI: May 2026 @AWS Security
Dark Reading
Check Point VPN Flaw Exploited Since Early May
Dark Reading
Iran Signed a Ceasefire — Its Hackers Didn't
Ars Technica Security
For the 2nd time in weeks, Microsoft packages laced with credential stealer
Schneier on Security
Critical Zcash Vulnerability Found and Fixed
Amazon Security
Operationalizing AWS security: A maturity roadmap
Google Safety & Security
Our latest fraud and scams advisory
MIT Technology Review
The Download: how the World Cup ball will fly and OpenAI’s “super app”
Schneier on Security
Anthropic’s Project Glasswing Update
MIT Technology Review
Why this year’s World Cup ball may not fly as far
Sicuranext Blog
क Karna: we built our own WAF. Modern, Fast and Free.
Sicuranext Blog
क Karna: we built our own WAF. Modern, Fast and Free.
Malwarebytes
A week in security (June 1 – June 7)
ISC SANS
ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)
Rosecurify
Seclog - #181
2026-06-05
Ars Technica Security
How a USB-connected speaker can infect a PC without ever being touched
Dark Reading
Exposed Fuel Tank Gauges Under Attack in the US
Amazon Security
Building secure B2C applications with fine-grained access control using Amazon Cognito and Amazon Verified Permissions
Rapid7
Weekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer Enum
Microsoft Security
Securing CI/CD in an agentic world: Claude Code Github action case
Include Security
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy
Searchlight Cyber
Preemptive Threat Exposure Management in the Age of AI
Schneier on Security
AI Worm
MIT Technology Review
The Download: AI hacking beyond Mythos, and chatbots’ impact on our brains
MIT Technology Review
Are AI chatbots making us lose control of our brains?
Malwarebytes
AI: Threat, tool, or both?
ISC SANS
ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)
2026-06-04
Dark Reading
Rust-Written IronWorm Hits NPM Supply Chain
Dark Reading
China's TA4922 Expands Cybercrime Attacks Globally
Ars Technica Security
Dashlane explains how attackers managed to download encrypted password vaults
Microsoft Security
Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
Talos Intelligence
Reporting from Vegas: Networking, AI, and good boys
Black Lantern Security
CVE-2026-10880 - Osnexus Quantastor 9.8 Unauthenticated SQL Injection
Palo Alto Networks
How AI and Evasion Demand a Radical Shift in Network Threat Prevention
Searchlight Cyber
Unknown assets explained with Asset Attribution Visualization
Cloudflare
VoidZero is joining Cloudflare
Talos Intelligence
Winning the cyber marathon with Tony Giandomenico
Talos Intelligence
Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting
Schneier on Security
Hacking Meta’s AI Chatbot
Escape DAST
Introducing Cascade: the multi-agent penetration testing that becomes an expert in your business
clearbluejar's Blog
System Over Model, Tested: Reproducing Mythos's FreeBSD Find on Local Open-Weight Models
TrustedSec
The Privileged Roles Nobody Talks About
ISC SANS
ISC Stormcast For Thursday, June 4th, 2026 https://isc.sans.edu/podcastdetail/9958, (Thu, Jun 4th)
Greynoise
4 Ways GreyNoise Improves SOC Outcomes
Sansec Threat Research
Magecart skimmer turns Stripe into a malware command server
Teleport Blog
How to Make Trading Infrastructure Audit-Ready Across SSH, Kubernetes, Databases, and RDP
Datadog HQ
Introducing Bits Agent Builder: Build agentic workflows for alert response and remediation
2026-06-03
Dark Reading
Attackers Use AI to Automate EDR Evasion Testing
Ars Technica Security
Can't make sense of Dashlane's vault theft notification? You're not alone.