Breaking News – Cyber Threats – 2026-06-17 13:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-06-17 13:00 PDT

• Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
  The Hacker News • 2026-06-17 11:14 • thehackernews.com
  An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research.

  The threat actor also has at their disposal a dedicated WordPress phishing page that acts as the central hub, alongside GitHub and SourceForge projects promoted by fake accounts, a YouTube channel, and a
  https://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.html

• Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development
  The Hacker News • 2026-06-17 10:36 • thehackernews.com
  Microsoft has formally disclosed that it’s working to release a patch to address a Defender zero-day codenamed RoguePlanet.

  The vulnerability has now been assigned the CVE identifier CVE-2026-50656 (CVSS score: 7.8), with the tech giant describing it as a privilege escalation flaw.

  “Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender
  https://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.html

• The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th)
  SANS ISC Diary (full) • 2026-06-17 09:01 • isc.sans.edu

  [This is a guest diary submitted by Varun Murdula]

  
  https://isc.sans.edu/diary/rss/33084

• Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
  The Hacker News • 2026-06-17 09:00 • thehackernews.com
  A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials.

  Ordinary stuff, until one move near the end.

  Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim’s machine, building a way back in that did not run through the C2 at all. When the Havoc server went offline the next
  https://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.html

• FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.
  BleepingComputer • 2026-06-17 08:12 • www.bleepingcomputer.com
  A newly discovered data leak dubbed “FortiBleed” has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide. […]
  https://www.bleepingcomputer.com/news/security/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices/
• Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
  The Hacker News • 2026-06-17 07:58 • thehackernews.com
  For security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain.

  The problem is no longer visibility. It’s validation. Security teams must decide which findings warrant action while operating under constant pressure and incomplete information. Increasingly, the challenge is not discovering potential risks. It is determining which risks
  https://thehackernews.com/2026/06/adversarial-exposure-validation-turns.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.