Cybersecurity News | Daily Recap [02 Jun 2026]

AI & Access

• Anthropic expanded Project Glasswing / Mythos access to 150 more organizations focused on critical infrastructure, widening availability of its Claude-based security tooling. – Glasswing Access, Mythos Access
• Meta AI was abused to hand over high-profile Instagram accounts to hackers, highlighting new account-takeover risks in AI-assisted support flows. – Meta AI
• The weekly roundup highlighted a wave of AI-powered attacks, alongside fresh exploits and OAuth phishing campaigns. – Weekly Recap

Supply Chain & Developer Threats

• A Red Hat npm supply-chain compromise hit 32 packages and, in the related Miasma campaign, used a credential-stealing worm to target developer secrets and CI/CD environments. – 32 Packages, Miasma Attack, Red Hat npm
• Dashlane said brute-force attacks caused limited encrypted vault downloads and user lockouts, while the incident underscored password-manager hardening concerns. – Dashlane Vaults, Dashlane Lockouts

Vulnerabilities & Exploitation

• HP VoIP phones contain a critical flaw that can enable enterprise network breaches if left unpatched. – HP VoIP Flaw
• Attackers are actively exploiting a Palo Alto Networks defect, CVE-2026-0257, after the issue initially flew under the radar. – Palo Alto CVE
• WP Maps Pro is being exploited to take over WordPress sites, while another campaign hides malware payloads in Steam profiles. – WP Maps Pro, Steam Payloads
• Windows Netlogon faces renewed attacker interest, with a critical vulnerability now in hackers’ crosshairs. – Netlogon Flaw
• Security reporting also flagged a newly discussed Linux flaw and broader urgency around faster vulnerability alerts. – Faster Alerts, Linux Flaw

Malware & Botnets

• Hackers hijacked thousands of websites for ClickFix and FakeUpdate attacks, spreading social-engineering payloads at scale. – ClickFix/FakeUpdate
• Dutch police dismantled a massive 17-million-device botnet, marking one of the largest takedowns in recent memory. – Botnet Takedown

Nation-State & Crime

• China-aligned groups stepped up activity, with Dragon Weave hitting targets in the Czech Republic and Taiwan. – Dragon Weave
• Spain arrested a doxer accused of leaking sensitive data tied to government employees. – Spain Arrest
• The Zero-Knowledge threat actor case sparked debate over the end of responsible disclosure practices. – Zero-Knowledge

Industry & Policy

• Dragos acquired xIoT security firm Phosphorus to strengthen its industrial and connected-device security portfolio. – Dragos Buyout
• Tina Peters, convicted in an election-security breach, said she will continue her legal fight despite the case’s fallout. – Tina Peters
• USPS is moving ahead with mail-in ballot changes as courts review a Trump election order, keeping election-process security in focus. – USPS Ballots
• Microsoft investigated Office apps and Teams file-access issues affecting users. – Office Issues

Cybersecurity News | Daily Recap – hendryadrian.com