Vulnerabilities
Council of Europe Confirms It Is Investigating Reported Breach Claims
The Oracle PeopleSoft campaign coverage extends into a major European intergovernmental institution.
Policy & Government
A Defender's Implementation Guide to CISA BOD 26-04: Patching by Risk, Not Severity
BOD 26-04 reaches beyond direct CISA jurisdiction — federally regulated industries, contractors, and state and local defenders now have a new benchmark for what good looks like.
Threat Intelligence
Week in Review — June 8-14, 2026: The Anthropic Action, the Disclosure Cascade, the npm Inflection
Five themes from one of the year's most consequential weeks — what they show about where the published-disclosure landscape, regulatory environment, and defender posture are moving.
Artificial Intelligence (AI)
Anthropic Disables Fable 5 and Mythos 5 Worldwide to Comply with US Export Controls
The US Commerce Department's national-security designation forced Anthropic to shut off worldwide access to its two newest models four days after launch — a first-of-its-kind export-control precedent for frontier AI.
Nation-State Cyber Threats
Chinese APT Backdoors Linux PAM Login Software for Nearly a Decade
One backdoored authentication module, one isolated network, ten years of undetected access — a reminder that critical authentication primitives are a forever-target.
Data Breaches
Novo Nordisk Cyberattack: Clinical Trial Data Stolen from Pharma Giant
Pharma giant Novo Nordisk discloses a clinical-trial data theft on the same day UK regulators greenlight its Wegovy pill — a reminder of the sector's persistent threat profile.
Nation-State Cyber Threats
FBI and Google Take Down $1.9B China-Based "Outsider" Cybercrime Network
A coordinated public-private takedown disrupts one of 2026's largest China-based cybercrime networks — and Google sues a related operation for abusing Gemini.
Ransomware
Europol Announces Takedown of AudiA6 Crypto Laundering Service
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Ransomware
Ukrainian National Pleads Guilty in Conti Ransomware Case
Another individual conviction in the long-running US law-enforcement effort against the Conti operation.
Nation-State Cyber Threats
ESET Publishes OceanLotus (APT32) Research Update — Domestic Targeting in Vietnam
ESET's research update reframes OceanLotus — the targeting is now inward.
Nation-State Cyber Threats
US Justice Department Charges Russian National in Void Blizzard Case
Another indictment in a Russia-aligned case — but unlike most, this defendant is already in US custody after an extradition from Thailand.
Ransomware
"The Gentlemen" Ransomware Claims 478 Victims and Spreads Like a Worm
A ransomware group that spreads like a worm and counts 478 victims — and the Krebs investigation now identifying the people running it.