The CyberSignal (Page 41)

Latest

Flat white line-art of a large shield with a small keyhole notch beside a wrench mid-turn — Microsoft RoguePlanet Defender zero-day confirmation.

Vulnerabilities

Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development

Microsoft has confirmed the publicly disclosed Defender issue tracked as CVE-2026-50656 and says a fix is in development. Defenders should follow the published mitigation guidance pending the patch.

Flat white line-art of a proxy server stack with two routing arrows and a patch tile — F5 NGINX Open Source critical patches.

Vulnerabilities

F5 Patches Two Critical NGINX Open Source Flaws (CVE-2026-42530, CVE-2026-42055)

Two critical NGINX Open Source patches — defenders running reverse-proxy and web-tier deployments should verify the patched versions this week.

Flat white line-art of a firewall appliance, a credential card and a shield — FortiBleed Fortinet credential-harvesting disclosure.

Vulnerabilities

Researchers Disclose Mass Credential-Harvesting Campaign Hitting Fortinet Devices (“FortiBleed”)

A large-scale credential-harvesting campaign across Fortinet deployments — sector-wide patch verification and credential rotation are the defender priority.

Flat white line-art of a shield with two overlapping patch tiles beside a console panel — Cisco additional SD-WAN Manager patch.

Vulnerabilities

Cisco Ships an Additional Catalyst SD-WAN Manager Patch as Exploitation Continues

Cisco's SD-WAN patch cycle continues this week — defender verification stays the priority.

Flat white line-art of a large magnifier over a document beside a simple alert card — North Korean-linked NarwhalRAT research disclosure.

Nation-State Cyber Threats

Researchers Detail a North Korean-Linked Campaign Using the NarwhalRAT Family

Another published-research disclosure for defenders to review for indicator relevance: researchers at Genians named NarwhalRAT, a remote access trojan they attribute to a North Korean-linked cluster, and published indicators worth checking against your own telemetry.

Flat white line-art of a large smartphone outline behind a simple gate form — UK under-16 social media restrictions.

Policy & Government

UK Government Announces Plan to Ban Social Media for Under-16s

Another major jurisdiction moves toward age-based social-media restrictions: the UK plans to bar under-16s from major platforms, with first regulations due before Parliament by year-end and enforcement targeted for spring 2027.

Flat white line-art of a large heart-monitor patch outline beside an open record card — iRhythm patient-records data breach disclosure.

Healthcare Cybersecurity

iRhythm Discloses Data Breach Affecting Patient Records: Sector-Advisory Work Begins

A medical-device company's patient-records disclosure — sector-advisory work begins. iRhythm told the SEC a threat actor obtained patient protected health information from third-party-hosted business applications, and judged the incident material.

Flat white line-art of a chat assistant panel beside a search field and a closed padlock — Microsoft 365 Copilot SearchLeak patch.

Vulnerabilities

Microsoft Patches a Microsoft 365 Copilot Flaw Researchers Named "SearchLeak"

Microsoft has patched a Microsoft 365 Copilot Enterprise Search vulnerability that researchers named “SearchLeak” — the fix is server-side, so defender Copilot-posture review and audit-log work is the practical follow-up.

Flat white line-art of a network router beside a management console panel and a wrench — Cisco Catalyst SD-WAN Manager advisory and patch.

Vulnerabilities

Cisco Patches an Actively Exploited Catalyst SD-WAN Manager Flaw (CVE-2026-20262)

Patch verification across Catalyst SD-WAN Manager deployments is the high-priority cycle this week.

Flat white line-art of a medical research flask, a server database, and a shield — GTIG China-nexus research-sector advisory.

Nation-State Cyber Threats

Google Threat Intel Details a China-Nexus Cluster Targeting Medical, Military, and AI Research

GTIG's published research resets sector advisory work for research organizations across North America, putting REDCap servers and Google Workspace administrative rules at the top of the review list.

Flat white line-art of several speech-bubble outlines arranged around a central document — cybersecurity responses to the US action on Anthropic's models.

Artificial Intelligence (AI)

Researchers and Cybersecurity Veterans Push Back on the US Action on Anthropic's Models

The June 15 reporting puts named researchers and cybersecurity veterans on the public record, questioning whether the US action against Anthropic's Fable 5 and Mythos 5 was warranted and urging that the restriction be lifted.

Flat white line-art of a classical institutional building beside a magnifying glass and a document folder — Council of Europe breach investigation.

Vulnerabilities

Council of Europe Confirms It Is Investigating Reported Breach Claims

The Oracle PeopleSoft campaign coverage extends into a major European intergovernmental institution.

See all