June 2026 Microsoft Patch Tuesday
Microsoft addresses 198 CVEs in the largest Patch Tuesday release, including three zero-days. Microsoft patched 198 CVEs in its June 2026 Patch Tuesday release, with 32 rated critical and 166…
-
-
Black Hat Asia 2026: Threat Hunters’ Corner
One of the first things we notice walking into the Black Hat NOC/SOC to help setup was that no one cared about who you worked for. No one was talking about how their product…
-
6th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 6th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES River Bank & Trust, a US financial…
-
NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more
This week’s release includes five new modules, including a full unauthenticated RCE chain for Paperclip AI and a VS Code extension persistence technique. On the post-exploitation side, the new windows/local/ntlm_relay_2_self module coerces…
-
HN687 Juniper CORA Coherent Optics Enabling IPoDWDM
Bandwidth solves all network problems and DWDM coherent optical networks are a significant step in efficiency and cost. Coherent SFP optic modules installed into routers replace the DWDM transponders at…
-
Weekly Threat Bulletin – June 3rd, 2026
Disgruntled 0-day Hunter ‘Humiliated’ by Microsoft Pledges ‘Bone Shattering Drop’ as Redmond Calls Cops A dispute between Microsoft and a bug hunter known as Nightmare Eclipse (also Chaotic Eclipse) has…
-
It Might Feel Like We’ve Been Here Before, But We Haven’t
As artificial intelligence (AI) adoption surges and organisations move from the ‘should we?’ phase to the ‘how do we?’ phase, it’s natural to evaluate the likelihood of positive returns on…
-
Cato CTRL Threat Brief: AI, Zero-Days, and the US-China Cyber Arms Race
TL;DR Underlying the US–China AI race, there’s arguably a more sinister arms race—the race to identify zero-day threats. Frontier AI algorithms, such as Anthropic Mythos (here) and China’s Qihoo 360…
-
Impact on vulnerability remediation| Tenable®
CISA issued BOD 26-04, which replaces BOD 22-01 with a four-variable vulnerability prioritization model requiring federal agencies to patch the most dangerous vulnerabilities in as few as three days. Key…
-
The Essence of Black Hat – Collaboration with Partners
As is tradition at every Black Hat conference, Day 1 winds down with a quick reality check – what’s done, what’s broken, and what absolutely needs to go live by tomorrow. Despite…
