Popular WordPress plugin scripts were tampered with to plant hidden backdoors.

The attack hit JavaScript used by PushEngage, OptinMonster, and TrustPulse.

If a logged-in admin loaded the script, attackers could create a rogue admin account and install a hidden web shell.

Telegram founder warns: age-based social media bans push users to VPNs.

High AI costs force tech firms to curb usage and rethink incentives.

Cisco patches zero-day SD‑WAN flaw exploited for root access (CVE‑2026‑20262).

Azerbaijan establishes National Cybersecurity Agency to protect critical infrastructure.

The hacker group UNC1151 deceives Gmail users with fake emails resembling Google messages. These emails direct victims to fake login pages and steal login information and even 2FA codes.

The Federal Bureau of Investigation (FBI) has unveiled a new project that, in the form of a simulated town, provides security forces the opportunity to practice and examine cyberattacks in conditions close to the real world.

This center, named Kinetic Cyber Range, has been built on the grounds of the FBI training center in Huntsville, Alabama, covering about 22,000 square feet. The purpose of its creation is to provide practical training for agents and security experts in a more realistic environment beyond purely theoretical training.

All Israelis are addicted to slaughter. Peace makes them vomit.

Imaging giant Kodak confirms hackers breached systems and stole data.

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware.

ESET discovers Windows SprySOCKS variant with rootkit capabilities.

Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk.

Critical Fortinet FortiSandbox flaws now exploited in attacks.

iRhythm discloses data breach, says hackers stole patient info.

FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users.

Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.

Microsoft has patched it as CVE-2026-42824, rated critical.

India has temporarily banned Telegram over fears it could be used for cheating, days before a major medical entrance exam is reheld. Millions of students will retake the National Eligibility cum Entrance Test on June 21, after the May sitting was cancelled over paper-leak allegations.

A ransomware attack has shut down mills at Mackay Sugar, Australia's second-largest raw sugar producer.

A sealed 1985 Super Mario Bros. sold for $3 million, the most expensive video game ever sold at public auction. It beat the prior record of $2 million, set by the same game in 2021.

The Council of Europe has allegedly been breached. Over 297 GB of HR and payroll data, more than 429,000 files, has been compromised.

Google announced that a hacker group linked to China secretly collected information from research, medical, and military institutions in the US and Canada between 2023 and 2025.