Major Incidents or Breaches

• Medtronic experienced a data breach in April, with threat actor ShinyHunters accessing corporate IT systems and stealing personal and medical information of 3.8 million individuals ^[15].
• A joint operation, including Google, disrupted the NetNut residential proxy network, severing access to 2 million compromised Android devices, smart TVs, and streaming boxes ^[10].
• Former Member of the European Parliament Stelios Kouloglou was repeatedly targeted with Pegasus spyware during his tenure investigating spyware abuses ^[9].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Google, in coordination with the FBI and industry partners, disrupted the NetNut residential proxy network, which relied on millions of compromised home devices to anonymize cybercriminal and nation-state activity. Hundreds of domains associated with NetNut were seized, significantly degrading the network’s operations ^[4][25][26].
• A dual US-Estonian citizen alleged to be a member of the Scattered Spider hacking collective was extradited to the United States to face charges ^[18].
• European Parliament members investigating Pegasus spyware were themselves targeted, with Citizen Lab confirming Pegasus infection on one investigator’s phone ^[24].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Medtronic has notified customers of a data breach resulting from unauthorized access to personal data, attributed to the ShinyHunters threat actor group ^[19].
• Kubota North America Corporation disclosed that hackers had access to parts of its network systems for over a month earlier this year ^[21].
• The US Department of Homeland Security confirmed a breach of the Homeland Security Information Network (HSIN), a sensitive information-sharing platform used by government agencies ^[23].
• Over 900 Oracle E-Business Suite instances have been found exposed online and are subject to ongoing attacks exploiting a critical security flaw ^[27].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Aflac disclosed a data breach following a hack at its Japan subsidiary, resulting in the theft of personal and bank account information for 4.38 million customers. Hackers accessed the policyholder portal multiple times between June 15 and June 25 ^[26][44].
• Nissan confirmed a breach of employee data following exploitation of an Oracle PeopleSoft vulnerability. This incident is part of a broader campaign targeting approximately 100 organizations ^[49].
• Nidec Corporation, a major Japanese manufacturer, is being extorted for $2 million by the Blackfield ransomware group ^[29].
• Business Email Compromise (BEC) continues to be a significant threat, with coordinated operations involving compromised accounts, financial research, and cash-out networks observed in underground forums ^[25].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Nissan disclosed a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability. This incident is linked to broader attacks involving the ShinyHunters group and the exploitation of a critical Oracle zero-day (CVE-2026-46817) ^{[13][14][20][37]}.
• The National Association of Insurance Commissioners (NAIC) confirmed a breach resulting from the same Oracle PeopleSoft vulnerability, with the ShinyHunters group claiming to have stolen 3.1 TB of data. NAIC stated that only publicly available data, outdated logs, and configuration files were taken ^[14][37].
• Hackers are actively exploiting a critical authentication bypass vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a new cross-platform infostealer targeting Windows, macOS, and Linux systems. The malware focuses on stealing credentials, including those related to cloud and AI environments ^[19][23].
• Over 236,000 websites built with the DCloud Uni-App framework are being abused for crypto scams, phishing, and wallet-draining attacks, leveraging legitimate development tools to host malicious content ^[10].
• Microsoft has removed more than 100 malicious Edge browser extensions that were delivering malware via images, after being advertised as useful tools ^[43].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Japanese telecommunications operator KDDI Corporation disclosed a data breach impacting an email system used by five additional internet service providers, exposing up to 14.2 million email logins to threat actors ^[3].

Newly Discovered Vulnerabilities

• A public proof-of-concept exploit has been released for CVE-2026-55200, a critical client-side flaw in libssh2 that allows a malicious or compromised SSH server to trigger memory corruption on connecting clients, potentially leading to code execution ^[1].

Notable Threat Actor Activity

Major Incidents or Breaches

• The Security Service of Ukraine (SSU) and the US FBI uncovered a long-running campaign by Russian intelligence services that used fake support text messages to steal messaging app credentials from Ukrainian citizens ^[1].
• LastPass confirmed another incident where users had their data stolen, marking a repeat compromise for the password manager service ^[5].

Notable Threat Actor Activity

Major Incidents or Breaches

• Polymarket customers lost approximately $3 million after hackers injected a malicious script into the platform’s frontend via a third-party vendor compromise. Polymarket has stated it will fully reimburse affected customers ^[16][31].
• The Klue-Salesforce breach has impacted roughly two dozen companies, with affected organizations notifying their customers of the incident ^[27].
• Exposed records from the Dialog group included personal information of a senior White House intelligence official and an active-duty special operations officer, prompting a Pentagon review ^[25].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Personal data belonging to politicians, military leaders, and executives was left publicly accessible due to a security misconfiguration at an elite networking organization, leading to a data breach affecting high-profile individuals ^[40].
• Authorities in Poland arrested four members of a cybercrime group accused of breaching telecommunications partners and hijacking email accounts to conduct SIM-swapping attacks, resulting in millions in cryptocurrency theft ^[13].

Newly Discovered Vulnerabilities

Major Incidents or Breaches

• Law enforcement and private sector partners have disrupted the infrastructure of the Amadey botnet and Stealc infostealer operations, recovering 27 million stolen credentials and impacting hundreds of command-and-control servers in a coordinated global action known as Operation Endgame ^{[5][8][17][30]}.
• The US Department of Justice has seized a cloud computing account linked to subsidiaries of Cambodia-based HuiOne Group, which was allegedly used for cyber scam money laundering ^[11].
• A 21-year-old hacker known as “Snoopy” has been sentenced to 18 months in prison for their involvement in the 2022 DraftKings cyberattack, with a requirement to pay approximately $1.8 million in forfeiture and restitution ^[13][33].

Newly Discovered Vulnerabilities