These news items are automatically aggregated from industry sources and are not individually reviewed. Any inaccuracies are unintentional —
let us know and we'll correct or remove it.
On 10 June 2026, a joint operation led by Europol and the US Department of Justice dismantled AudiA6, a cryptocurrency laundering service that had processed over 336 million euros in illicit funds since 2021. Two administrators were arrested in Georgia, 25 domains and more than 30 servers were seized, and the takedown severed a primary financial channel used by ransomware groups to convert extortion payments into clean funds. The operators also ran Dark2Web, a dark web forum connecting cybercriminals across Europe and beyond.
Hetzner is implementing its third round of price increases this year on 15 June 2026, affecting new orders for dedicated servers and cloud plans across all its locations. With component costs for RAM, SSDs, and GPUs remaining volatile, the increases follow earlier adjustments in April that pushed cloud prices up by 30 to 37 percent in Germany and Finland. The change will not affect existing contracts, but any team planning infrastructure expansion or new deployments needs to factor it in now.
On 10 and 11 June 2026, ENISA ran the 8th edition of the Cyber Europe exercise, simulating escalating cyberattacks against the EU’s interconnected rail and maritime transport networks. For the first time, the EU Cybersecurity Reserve was activated as part of the scenario, testing the cross-border incident response mechanisms that the EU is building ahead of tighter NIS2 enforcement across transport sector operators.
France’s government messaging platform Tchap, built on Matrix to keep civil servant communications off foreign infrastructure, was compromised on 7 June 2026 through a hijacked account in its education environment. An attacker claims to have obtained over 73,000 user accounts, 643,000 messages, and files marked with a French restricted-distribution classification, though the full extent of the breach is still under investigation.
SAP’s June 2026 Security Patch Day addressed 15 vulnerabilities, four of them rated critical. The most severe, CVE-2026-44748 with a CVSS score of 9.9, allows an authenticated attacker to bypass SAML authentication in SAP NetWeaver AS ABAP by manipulating XML signatures. A second critical flaw, CVE-2026-27671 with CVSS 9.8, allows unauthenticated remote code execution via a memory corruption bug in the ABAP kernel.
On 3 June the European Commission published its Tech Sovereignty Package, proposing the Cloud and AI Development Act alongside Chips Act 2.0 and an Open Source Strategy. Together they aim to reduce the EU’s 80% dependence on non-European digital infrastructure and establish a four-tier sovereignty framework for cloud services. The legislation will reshape procurement decisions and cloud architecture choices across the public sector and critical infrastructure.
At its Transcend event on 10-11 June, GitLab unveiled a rearchitected Git protocol built for AI agents, a lifecycle context graph that reduces hallucinations by 45x, and an AI Governance framework that puts identity and audit trails around every agent action. The announcements signal that agentic development is moving from experiment to production infrastructure – with all the security and compliance obligations that brings.
Attackers exploited an unauthenticated REST API endpoint in ServiceNow between 2 and 5 June 2026, querying customer instance data without valid credentials. A patch was applied on 5 June. Organisations running ServiceNow should audit logs for the identified IP address and review access controls across all API endpoints that may be misconfigured with authentication disabled.
Microsoft’s June 2026 Patch Tuesday is the largest in the programme’s history, addressing 198 vulnerabilities including three actively exploited or publicly known zero-days and critical remote code execution flaws that allow VM guest escape from Windows Hyper-V. Organisations running unpatched Windows environments face significant exposure across virtualisation, remote desktop, and core kernel components.
Veeam has patched a critical remote code execution vulnerability in Backup and Replication v12 that allows any authenticated domain user to execute arbitrary code on the backup server. Rated CVSS 9.4, CVE-2026-44963 was disclosed and patched on 9 June 2026. Given the speed at which previous Veeam CVEs have been weaponised, organisations running v12 builds should patch immediately.
This site uses cookies. By continuing to use this website, you agree to their use.
We’ll help you resolve your infrastructure challenges
Our team of experts is ready to help you with your infrastructure challenges. We’ll give you honest and personal treatment. Get in touch to learn more.
