Cybersecurity platforms are rapidly adopting generative and agentic AI, but the hidden shift to token-based consumption is creating unpredictable costs that can overwhelm SOC budgets during active incidents. The article explains how ML, GenAI, and agentic AI differ in cost behavior and warns that vendors like Anthropic’s Claude and OpenAI-style APIs…
Category: Cyber Security News
CISA said ransomware gangs are now exploiting the Microsoft Defender privilege escalation flaw BlueHammer (CVE-2026-33825), which had already been used in zero-day attacks. The vulnerability was leaked with proof-of-concept code by researcher “Nightmare Eclipse,” and it can lead attackers from local access to full SYSTEM control on Windows devices. #BlueHammer #CVE-2026-33825 #MicrosoftDefender #NightmareEclipse #CISA
Blackfield ransomware is demanding $2 million from Nidec Corporation after claiming a breach at its Taiwanese subsidiary, Nidec Chaun Choung Technology. Nidec says it is investigating the incident, which may involve a data leak, while trying to limit disruption to operations. #Blackfield #Nidec #NidecChaunChoungTechnology
Kali Linux 2026.2 is now available with 9 new tools, updated desktop environments, kernel upgrades, and major Kali NetHunter improvements for Android-focused penetration testing. The release also streamlines VM performance with faster boot times and reduced initrd size, while adding new service helper scripts and broader device support. #KaliLinux #KaliNetHunter
![Cybersecurity News | Daily Recap [29 Jun 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [29 Jun 2026]")
Daily Recap, OpenAI and Anthropic are limiting access to new AI models during a cybersecurity review, while OpenAI also introduced GPT-5.6 Sol as its most advanced cybersecurity-focused AI and Straiker raised $64 million to expand its AI security platform for enterprise workloads. DirtyClone is highlighted for a Linux kernel issue that can enable root access, Microsoft removed 119 Edge extensions that hid malware in images and fonts, and a breach exposed up to 14.2 million email logins across six ISPs—along with U.S. bounties tied to Russian state hackers and updated post-quantum cryptography readiness demands for CISOs. #OpenAI #Anthropic #GPT-5.6 Sol #Straiker #DirtyClone #Microsoft #Edge #Russian #post-quantum #CISO #DirtyCloneLinux #6 ISPs
The United States is offering up to $10 million for information on members of UNC5792 and UNC4221, two Russia-linked groups accused of targeting Signal and WhatsApp accounts used by officials, journalists, and other high-profile figures. The FBI says the campaign relies on social engineering to steal verification codes, PINs, and backup…
The U.S. government seized nearly 400 domains that were illegally streaming World Cup matches, with the operation coordinated by HSI, the DOJ, FIFA, NBC Universal, and the ICHIP Network. Officials warned that these pirate streaming sites can also expose viewers to malware, insecure connections, and risks to personal and financial data….
The SSU and FBI uncovered a long-running Russian intelligence campaign targeting messaging accounts of officials, military personnel, politicians, and activists in Ukraine, Europe, and the U.S. The attacks use SMS lures to steal credentials and sensitive information from victims, while related phishing activity has also been tied to efforts against commercial…
Mustang Panda is targeting Indian government and hydropower-related organizations with spear-phishing, sideloading malware, and abuse of Zoho WorkDrive as a covert command channel. Acronis linked the activity to three tools—SHARDLOADER, MINIRECON, and ZOHOMURK—and published indicators to help defenders detect the campaign. #MustangPanda #ZohoWorkDrive #SHARDLOADER #MINIRECON #ZOHOMURK #CERTIn…
The Supreme Court ruled that police access to location history data from tech companies is a Fourth Amendment search and requires a warrant. The decision strengthens digital privacy protections and could limit geofence searches and other broad demands for data from companies like Google, Apple, Uber, and Lyft. #Google #Apple #Uber…
NAIC says ShinyHunters accessed its systems through an Oracle PeopleSoft zero-day, but the stolen data was limited to publicly available reports, outdated logs, and configuration files. The organization says no PII or financial data was exposed, and it has remediated affected systems after the extortion attempt and leak. #ShinyHunters #NAIC #OraclePeopleSoft #CVE-2026-35273
Nissan says a data breach exposed current and former employee information after attackers exploited an Oracle PeopleSoft vulnerability in theft attacks linked to ShinyHunters. The incident may have affected employees in the United States, Canada, Mexico, and Brazil, while Oracle and Mandiant have confirmed widespread exploitation of CVE-2026-35273 across hundreds of organizations. #Nissan #OraclePeopleSoft #ShinyHunters #CVE-2026-35273
A new Senate discussion draft called the AI AGENT Act would create an FTC-backed list of approved AI agent providers so users can securely run agents on major online platforms while retaining human ownership and control. The bill aims to require identity linkage, privacy and security safeguards, and permission controls as concerns grow over autonomous agents making purchases, posting content, and changing account settings without consent. #AIAGENTAct #FTC #SenMarkWarner
WhatsApp has begun rolling out global username reservations to help more than three billion users protect their phone numbers and connect privately on the platform. The feature also includes optional username keys for extra protection, while allowing creators, businesses, and organizations to reserve familiar usernames across WhatsApp, Instagram, and Facebook. #WhatsApp…
Microsoft uncovered a malicious Chrome extension called “Search for perplexity ai” that impersonated Perplexity and siphoned every search query and even keystrokes from the address bar through an attacker-controlled domain. The extension was removed from the Chrome Web Store after disclosure, and users are advised to delete it, verify search settings,…