Breaking News – Cyber Threats – 2026-06-04 03:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-06-04 03:00 PDT

• Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
  The Hacker News • 2026-06-04 02:51 • thehackernews.com
  Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer, AnimateClipper, and the SessionGate framework.

  “The sites are well-designed and often look like legitimate project portals at a glance, sometimes referencing
  https://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.html

• Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
  The Hacker News • 2026-06-04 02:33 • thehackernews.com
  Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity.

  Symantec and Carbon Black’s Threat Hunter Team reported the campaign this week. This points to espionage, not a money grab:
  https://thehackernews.com/2026/06/hackers-spied-on-stock-exchange.html

• CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
  The Hacker News • 2026-06-04 00:19 • thehackernews.com
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.

  The vulnerability, tracked as CVE-2026-45247 (CVSS score: 9.8), is a case of deserialization of untrusted
  https://thehackernews.com/2026/06/cisa-adds-exploited-magento-rce-flaw.html

• Microsoft's Coreutils for Windows, (Thu, Jun 4th)
  SANS ISC Diary (full) • 2026-06-03 23:10 • isc.sans.edu

  I've been using the GnuWin32 CoreUtils for Windows for many years now (it gives you many *nix core commands on Windows).

  
  https://isc.sans.edu/diary/rss/33048

• DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
  The Hacker News • 2026-06-03 23:06 • thehackernews.com
  The U.S. Department of Justice (DoJ) on Wednesday announced the results of a sweeping action undertaken by government authorities and private sector companies to combat cyber-enabled and cryptocurrency fraud targeting Americans.

  The “Disruption Week” operation began May 18, 2026, leading to the takedown of millions of social media, email, and internet access accounts used by transnational
  https://thehackernews.com/2026/06/doj-disrupts-southeast-asia-crypto.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.