Breaking News – Cyber Threats – 2026-06-08 13:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-06-08 13:00 PDT

• WhatsApp says it disrupted new NSO spyware phishing attacks
  BleepingComputer • 2026-06-08 11:40 • www.bleepingcomputer.com
  WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks. […]
  https://www.bleepingcomputer.com/news/security/whatsapp-says-it-disrupted-new-nso-spyware-phishing-attacks/
• Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order
  The Hacker News • 2026-06-08 10:08 • thehackernews.com
  Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group.

  In addition, the tech giant said it’s filing a federal court contempt order against the company for violating a permanent injunction that barred it from targeting WhatsApp and its users.

  “They tried to trick people into clicking on malicious links to drive them to external websites
  https://thehackernews.com/2026/06/meta-blocks-nso-groups-new-whatsapp.html

• TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)
  SANS ISC Diary (full) • 2026-06-08 10:07 • isc.sans.edu

  This diary continues the Internet Storm Center's tracking of the TeamPCP supply chain campaign, first documented in the SANS white paper When the Security Scanner Became the Weapon and most recently in the handler diary Activity Through 2026-05-24. Since that update, the story moved into two new places: the United States government, which formally caught up to the campaign, and the wider population of attackers now wield…
  https://isc.sans.edu/diary/rss/33060

• Critical Zcash Vulnerability Found and Fixed
  Schneier on Security • 2026-06-08 10:06 • www.schneier.com

  If you’re a user—owner?—of this cryptocurrency, this is important:

  On May 29, the security researcher Taylor Hornby found a critical vulnerability in Zcash Orchard privacy pool using Claude Opus 4.8. The Zcash team hired Hornby specifically to look for this kind of issue. He found one fast enough to be embarrassing.

  The Orchard pool is the newest and most advanced shielded transacti…
  https://www.schneier.com/blog/archives/2026/06/critical-zcash-vulnerability-found-and-fixed.html

• Gogs patches critical zero-day enabling remote code execution
  BleepingComputer • 2026-06-08 09:18 • www.bleepingcomputer.com
  Gogs has patched a critical security zero-day flaw that can allow attackers to compromise Internet-facing instances and access any repositories (including private ones). […]
  https://www.bleepingcomputer.com/news/security/gogs-patches-critical-zero-day-enabling-remote-code-execution/
• Critical UniFi OS bug lets hackers gain root without authentication
  BleepingComputer • 2026-06-08 08:51 • www.bleepingcomputer.com
  Attackers can chain three already fixed vulnerabilities in the Ubiquiti UniFi OS server to execute remote code with root privileges and without authentication. […]
  https://www.bleepingcomputer.com/news/security/critical-unifi-os-bug-lets-hackers-gain-root-without-authentication/
• Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
  The Hacker News • 2026-06-08 07:17 • thehackernews.com
  Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.

  The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user
  https://thehackernews.com/2026/06/critical-check-point-vpn-flaw-exploited.html

• Reducing security operations complexity with Wazuh Cloud
  BleepingComputer • 2026-06-08 07:01 • www.bleepingcomputer.com
  Security teams are increasingly overwhelmed by alert fatigue, infrastructure maintenance, and complex hybrid environments. This article explores how Wazuh Cloud helps simplify SIEM/XDR operations through managed infrastructure, automated scaling, and AI-driven security analysis. […]
  https://www.bleepingcomputer.com/news/security/reducing-security-operations-complexity-with-wazuh-cloud/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.