threat-intel CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices CISA has issued a warning to Fortinet customers regarding FortiBleed, a campaign targeting 86,644 FortiGate devices globally. The attack, attributed to Russian-speaking threat actors, leverages a two-step approach involv… The Hacker News · Jun 19, 2026 High USINMEcredential_stuffingdefault_credentialspassword_reuse
threat-intel CISA warns Fortinet users to secure devices after FortiBleed leak CISA has issued a warning to Fortinet customers regarding the "FortiBleed" data leak, which exposed nearly 74,000 firewall and VPN credentials. Threat actors are exploiting these compromised credentials to target interne… BleepingComputer · Jun 19, 2026 High USRUCNcredentialsvpnfirewall
threat-intel No Exploits Required This article discusses the limitations of relying solely on exploiting vulnerabilities in cybersecurity, arguing that defenders often struggle due to the inherent complexity and interconnectedness of modern networks. The… SecurityWeek · Jun 18, 2026 Medium network securitycybersecurityzero-trust
threat-intel Warner warns of CISA cuts, staffing gaps in letter to acting chief This article reports concerns from Senator Mark Warner regarding significant cuts to the Cybersecurity and Infrastructure Security Agency (CISA), including staff reductions, budget constraints, and a lack of permanent le… The Record · Jun 17, 2026 High UScisacybersecurityfunding
vulnerability CISA warns of another cPanel plugin flaw exploited in attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a critical vulnerability (CVE-2026-48172) in the LiteSpeed cPanel user-end plugin, which is currently being actively exploited.… BleepingComputer · Jun 16, 2026 Critical CVE-2026-54420CVE-2026-48172cpanelvulnerabilityprivilege escalation
vulnerability Ivanti Sentry Exploitation Attempts Hitting Honeypots A recently patched vulnerability in Ivanti Sentry, CVE-2026-10520, has been observed attempting exploitation on honeypots, according to Ivanti and CISA. The flaw allows for remote code execution with root privileges via… SecurityWeek · Jun 12, 2026 High CVE-2026-10520USvulnerabilitycommand injectionroot privilege
threat-intel Segmentation Works for OT If Operators Are Paying Attention This Dark Reading article highlights the ongoing challenges of operational technology (OT) security, particularly concerning network segmentation. Despite the widely recommended practice of isolating systems to limit dam… Dark Reading · Jun 11, 2026 High ot securitynetwork segmentationcybersecurity
threat-intel CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk CISA has issued Binding Operational Directive 26-04, requiring federal agencies to prioritize patching security vulnerabilities based on risk, building upon previous efforts established in 2021. This directive focuses on… SecurityWeek · Jun 11, 2026 High vulnerabilitypatchingrisk
threat-intel CISA Rewrites Federal Patching Requirements for AI Threat Era CISA has issued a new Binding Operational Directive (BOD) 26-04 to overhaul federal agency patching requirements, prioritizing rapid remediation of the most dangerous vulnerabilities within three days. This shift reflect… Dark Reading · Jun 10, 2026 High patchingvulnerabilityai
threat-intel CISA to require federal agencies to patch some cyber vulnerabilities within 3 days CISA has issued a new binding operational directive requiring federal civilian agencies to patch critical cybersecurity vulnerabilities within a tight 72-hour timeframe, prioritizing those exposed to the internet and sus… The Record · Jun 10, 2026 High USvulnerabilitypatchingai
threat-intel CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says CISA is undergoing a significant transformation in its approach to cybersecurity vulnerability assessment, shifting from a blanket patching strategy to a risk-based prioritization model. This change, driven by increasing… The Record · Jun 9, 2026 Medium risk-basedvulnerability managementcybersecurity
threat-intel Iran Signed a Ceasefire — Its Hackers Didn't This Dark Reading article discusses the ongoing cyber warfare between Iran and the United States, highlighting a significant loophole in international conflict rules. Following a ceasefire extension, U.S. agencies warned… Dark Reading · Jun 8, 2026 High IRUSIScyberwarfarecritical infrastructureiran
vulnerability Gogs patches critical zero-day enabling remote code execution A critical zero-day vulnerability in Gogs, a remote collaboration platform, has been identified, allowing authenticated attackers to execute remote code and access private repositories. The flaw, present in versions up t… BleepingComputer · Jun 8, 2026 High CVE-2024-39933CVE-2024-39932CVE-2026-26194USCNJPremote-code-executionzero-dayauthentication
threat-intel Exposed Fuel Tank Gauges Under Attack in the US Internet-exposed fuel tank gauges in the United States are being targeted by cyberattacks, posing a significant risk to gas stations and industrial facilities. The Cybersecurity and Infrastructure Security Agency (CISA)… Dark Reading · Jun 5, 2026 High USCAAUindustrial control systemscybersecuritytank gauges
threat-intel Over 900 US gas station tank gauge systems exposed to attacks Over 900 US gas station tank gauge systems are vulnerable to ongoing attacks due to internet exposure and security flaws. Threat actors are exploiting these systems to potentially alter settings and cause operational dis… BleepingComputer · Jun 5, 2026 High USatgindustrial control systemscybersecurity
threat-intel Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 Palo Alto Networks Unit 42 has identified active exploitation of CVE-2026-0257, a PAN-OS vulnerability related to GlobalProtect authentication, by an unidentified threat actor. The vulnerability allows unauthorized VPN c… Palo Alto Unit 42 · Jun 5, 2026 High CVE-2026-0257vpnauthenticationvulnerability
threat-intel In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA This week’s cybersecurity news highlights a range of threats, including AI-powered attacks targeting computing power, ongoing Grandoreiro banking trojan campaigns, and a self-propagating ransomware group utilizing obfusc… SecurityWeek · Jun 5, 2026 High IRUSairansomwaresupply chain
threat-intel DHS chief signals efforts to reshape CISA The Department of Homeland Security (DHS) is undertaking efforts to revitalize the Cybersecurity and Infrastructure Security Agency (CISA), which has faced significant challenges including workforce reductions and budget… The Record · Jun 3, 2026 Medium cisadhsbudget cuts
threat-intel White House unveils pared-back AI executive order The White House has released a revised executive order addressing artificial intelligence, significantly shortening the mandatory review period for AI model releases from 90 days to 30 days, responding to industry pressu… The Record · Jun 2, 2026 Medium USaicybersecurityregulation
threat-intel CISA and Partners Urge Hardening Automatic Tank Gauge Systems CISA, alongside several US government agencies, has issued an alert regarding malicious cyber activity targeting Automatic Tank Gauge (ATG) systems used across sectors like energy, chemicals, and transportation. Cyber ac… CISA Advisories · Jun 2, 2026 High oticstank gauges
