These news items are automatically aggregated from industry sources and are not individually reviewed. Any inaccuracies are unintentional —
let us know and we'll correct or remove it.
Two weeks before WWDC 2026 opens on June 8, Apple quietly registered genai.apple.com, a subdomain that returns a connection timeout rather than a 404, signalling it is staged and ready to go live. Combined with reporting that iOS 27’s rebuilt Siri will use Google Gemini technology routed through Apple’s own Private Cloud Compute infrastructure rather than Google’s servers, the registration suggests Apple is preparing to position generative AI as something that can be both capable and private.
Microsoft Threat Intelligence has disclosed a threat actor called Storm-2949 that walked through an organisation’s entire Azure and Microsoft 365 environment using only password resets and social engineering against MFA prompts. No malware, no novel CVE. The attack reached Key Vault secrets, SQL databases, SharePoint documents, and production virtual machines before defenders detected it.
A critical unauthenticated SQL injection flaw in Ghost CMS (CVSS 9.4) is being actively exploited in the wild, with attackers hijacking more than 700 websites, including those of major institutions, to deliver ClickFix malware through injected JavaScript. Sites running Ghost versions 3.24.0 through 6.19.0 need to patch immediately.
A new ransomware family called Payload has claimed 12 victims across seven countries since launching in February 2026, targeting both Windows and VMware ESXi infrastructure with a refined Babuk-derived encryption scheme that erases per-file private keys from memory after locking each file, making recovery without the operator’s key mathematically impossible.
iOS 26.5 and the latest Google Messages update are bringing end-to-end encrypted RCS messaging to cross-platform conversations between iPhone and Android users, ending years of reliance on unprotected SMS infrastructure for the most common mobile communication channel. Separately, Apple’s Siri deal with Google raises questions about where AI conversations are processed.
A highly critical SQL injection vulnerability in Drupal core, disclosed on May 20 and affecting PostgreSQL-backed sites from version 8.9.0 through 11.3.9, is under active exploitation with more than 15,000 attack attempts recorded against nearly 6,000 sites within the first 48 hours of disclosure.
A coordinated supply chain campaign called TrapDoor has deployed 34 malicious packages and more than 384 related versions across npm, PyPI, and Crates.io, targeting developers in crypto, AI, and security to steal AWS keys, GitHub tokens, SSH keys, and crypto wallets. The campaign also embeds hidden instructions in AI coding assistant configuration files to hijack Claude Code and Cursor sessions.
The FBI has issued a public service announcement about Kali365, a Phishing-as-a-Service platform first seen in April 2026 that captures Microsoft 365 OAuth tokens via the device code flow, rendering standard multi-factor authentication ineffective.
Attackers compromised four widely-used Laravel localisation packages on Packagist, rewriting Git tags across more than 700 versions to inject a 5,900-line PHP credential stealer that exfiltrates cloud keys, CI tokens, SSH material, and browser data on every request.
CVE-2026-42897 is an Outlook Web Access cross-site scripting vulnerability in on-premises Exchange Server that is being exploited in the wild via crafted emails. CISA added it to the Known Exploited Vulnerabilities catalog with a May 29 remediation deadline for federal agencies. No permanent patch exists yet.
This site uses cookies. By continuing to use this website, you agree to their use.
We’ll help you resolve your infrastructure challenges
Our team of experts is ready to help you with your infrastructure challenges. We’ll give you honest and personal treatment. Get in touch to learn more.
