Ransomware
Europol Announces Takedown of AudiA6 Crypto Laundering Service
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Ransomware
Ukrainian National Pleads Guilty in Conti Ransomware Case
Another individual conviction in the long-running US law-enforcement effort against the Conti operation.
Vulnerabilities
Ivanti Sentry Critical Flaws Exploited 24 Hours After Disclosure
Twenty-four hours separated disclosure from in-the-wild exploitation — CISA's emergency directive gives federal agencies three days to patch.
Nation-State Cyber Threats
US Justice Department Charges Russian National in Void Blizzard Case
Another indictment in a Russia-aligned case — but unlike most, this defendant is already in US custody after an extradition from Thailand.
Policy & Government
CISA Rewrites Federal Patching with BOD 26-04 — Patch by Risk, Fix Criticals in 3 Days
CISA's new directive ends CVSS-led patching for federal agencies — risk becomes the prioritization signal, and the most dangerous bugs must be patched in three days.
Threat Intelligence
Meta Files Federal Contempt Motion Against NSO Group Over Alleged WhatsApp Targeting
Meta's contempt filing tests whether court-ordered restrictions are effectively binding on a commercial spyware vendor.
Cybersecurity 101
Data Breach Notification Laws Explained (2026 Guide)
A practitioner's guide to data breach notification laws in 2026: what triggers a notice, who you must tell, the GDPR 72-hour rule, HIPAA, SEC and US state deadlines, the penalties for getting it wrong, and how to build notification into your incident response plan.
Artificial Intelligence (AI)
Mythos: NSA Reportedly Readies It for Offense as Anthropic Publishes a Misuse Analysis
Two Mythos threads landed this cycle: TechCrunch reports the NSA is said to be readying Anthropic's Mythos for cyber operations despite a federal restriction, while Anthropic published an analysis of 832 accounts banned for malicious cyber activity, mapped to MITRE ATT&CK.
Nation-State Cyber Threats
Five Eyes: China Is Using LinkedIn and Job Sites to Recruit Insiders
A joint Five Eyes advisory warns that Chinese intelligence officers, posing as recruiters and consultants for front companies, are using LinkedIn, Indeed and Upwork to recruit government, military and cleared personnel — and anyone with access to classified or privileged information.
Critical Infrastructure
CISA and Partners Warn Hackers Are Targeting Fuel-Tank Monitoring Systems
CISA, the FBI, NSA, Department of Energy and other US agencies warn that hackers are targeting internet-exposed automatic tank gauge (ATG) systems that monitor fuel storage, modifying device settings via command execution. The fix: get them off the public internet.
Policy & Government
Pentagon's Top Cyber Official Wants Cyber in Every Operation — and Security Built Into AI From Day One
The Pentagon's top cyber official, Katherine Sutton, says the Defense Department must pull cyber 'out of its silo' and build it into every operation from day one — and must bake security into the AI tools it adopts, rather than treating it as an afterthought.
Policy & Government
Trump Signs a Scaled-Back AI Executive Order Built Around Sharing AI-Found Vulnerabilities With Critical Infrastructure
Trump signed an executive order on June 2 setting up a voluntary framework for the government to vet 'covered frontier' AI models for up to 30 days before release and to share AI-found vulnerabilities with critical-infrastructure operators — notably narrower than an earlier draft.