Weekly News - Low-skilled attacker used Claude, Codex to breach 14 companies

74,000 Fortinet firewall credentials exposed in FortiBleed data leak - View in browser  Weekly cybersecurity news June 22, 2026 Identity discovery: the overlooked lever in strategic risk reduction Most identity security programs were designed for a world that no longer exists. Identity discovery uncovers new blind spots: the place where breaches begin. Get your report now. Latest articles: Klue breach lead to Salesforce data theft, Huntress affected Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253) Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures Mastodon 4.6 adds profile Collections and two-factor controls Google sets timeline for Android developer verification enforcement Your browser tab could become encrypted storage for someone else’s files Companies are discarding the logs they need to catch a breach Asia-Pacific scam networks generate nearly $40 billion a year New infosec products of the week: June 19, 2026 Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned Malware attacks strip Roblox developers of entire games 74,000 Fortinet firewall credentials exposed in FortiBleed data leak GentleKiller targets more than 400 security processes across 48 products Securing digital keys when your phone unlocks the car Google’s open standard for AI agents to discover and verify tools How security teams are getting credential visibility into developer endpoints What happens to oversight when AI agents write a lab’s own code AWS Continuum brings AI models to code vulnerability management Homebrew tightens tap security, begins work on its interface Most agentic AI projects in production have stalled over data problems Low-skilled attacker used Claude, Codex to breach 14 companies Another healthcare firm attacked days after Novo Nordisk breach Rokarolla Android trojan targets banking and crypto users, enables device takeover Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656) What’s new in Android 17? Anti-theft tools, scam detection, and parental controls The Chainguard Athena coalition already shipped 2,000 patches across 500 open source projects Ukraine can now tap EU cyber support during major attacks Apple is bringing Hide My Email and Sign in with Apple under one domain The SOC’s visibility gap comes down to staffing Microsoft AntiSSRF open-source library helps block server-side request forgery Product showcase: From phishing texts to risky Wi-Fi, Norton 360 Deluxe watches the gaps The checklist problem behind critical infrastructure cyber safety Attackers are exploiting FortiSandbox vulnerabilities Cybercriminals mask malicious communications through Microsoft Teams relays SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558) Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262) Crypto scammers are sending couriers to victims’ homes to collect cash Software supply chains are heading for a transparency test Planning a trip? Fake travel sites are multiplying this summer GitHub releases an open dataset for multilingual developer content Reachability makes AI threat modeling worth the trust EU Cybersecurity Act 2.0: When good regulation goes bad The rise of machine identities and agentic AI: Securing trust in the next era of digital autonomy A $2 trillion revenue shift hinges on AI data governance Cybersecurity jobs available right now: June 16, 2026 Chinese hackers breached North American research institutions via REDCap servers China-linked spies backdoored authentication stack to stay hidden for years Ukrainian national pleads guilty in connection with Conti ransomware AI vulnerability discovery is pushing 2026 CVEs toward 66,000 PhishLumos: Exposing phishing campaigns that evade detection by hiding content Microsoft’s workplace check-in via Wi-Fi tracks who’s in the office, and not everyone’s happy Onspring CISO on where automated GRC systems fall short Open-source CI/CD abuse detector guards against stolen credential attacks A hardware neural network backdoor that hides in plain sight Proving what a military AI model will do is the real problem Senior engineers are spending their week cleaning up AI-generated code Video: Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure Industry news: Accenture to buy Dragos, runZero, and NetRise in $4.2 billion cybersecurity deal BlackFog brings shadow AI visibility to macOS endpoints with ADX Vision eSentire links AI-led penetration testing with MDR through Atlas Preempt Barracuda introduces AI-powered email security with automated threat response New 42Crunch plugin helps developers find and fix API vulnerabilities in GitHub Copilot Blue Planet helps service providers reduce risk with unified network change governance WitnessAI Agentic Control secures AI agents, tools, and MCP server access Tigera introduces unified control plane for Kubernetes-based AI agent security Flip expands platform with digital identity, no-code apps, and AI automation Corelight enhances Open NDR to detect AI-driven threats and unknown assets ArmorCode helps product manufacturers prepare for EU Cyber Resilience Act requirements Legit Security brings agentic AI to AppSec remediation and risk reduction Tenable One adds continuous security control validation to improve exposure prioritization VelocityEHS uses QR codes to speed up incident reporting and risk response Fortinet FortiSOC unifies SIEM, SOAR, threat intelligence, and AI in one platform TekStream launches Proactive Cyber Defense to counter AI-driven threats AppViewX extends machine identity security to AI agents and post-quantum environments Teleport adds LLM Proxy and Delegated Identity to secure AI agent actions and access Radware AI Xploit Shield delivers virtual patching for newly identified application and API flaws Delinea and Cyera integrate for data-aware identity security 1Password Credential Broker reduces secret sprawl through identity-based credential delivery Trust3 AI’s AgentDOS monitors AI agent activity, data access, and token consumption Omada Agent Governance helps organizations manage AI agent access, risk, and compliance Red Sift, GMO GlobalSign partnership simplifies email authentication and BIMI adoption Modat enhances Magnify with Passive DNS for faster threat hunting and infrastructure analysis LTM’s BlueVerse for iRun applies agentic AI to managed IT operations Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive