WeedHack is a large-scale Malware-as-a-Service infostealer campaign targeting Minecraft players through malicious mods, clients, cheats, and utilities spread via YouTube and SEO poisoning. McAfee says the operation has infected more than 116,000 systems and steals credentials, browser data, and cryptocurrency information while offering remote-access features in its premium tier. #WeedHack #Minecraft #McAfee
Category: Cyber Security News
CISA has added CVE-2024-21182, a high-severity Oracle WebLogic Server flaw, to its Known Exploited Vulnerabilities Catalog after evidence of active exploitation. The issue can let an unauthenticated attacker with network access compromise affected servers, and federal agencies are urged to patch by June 4, 2026. #OracleWebLogicServer #CISA #CVE-2024-21182…
Microsoft announced Coreutils for Windows at Build 2026, bringing Linux command-line utilities like ls, cp, grep, and rm to Windows as native apps through a single coreutils.exe binary. The release is based on the open-source uutils project and aims to help developers move across Windows, Linux, macOS, and WSL without changing scripts or workflows. #CoreutilsforWindows #uutils #WSL
Gamaredon has been linked to a WinRAR exploit chain using CVE-2025-8088 to deploy GammaPhish, GammaLoad, GammaWorm, and GammaSteel for espionage, persistence, and data theft. The activity targets Ukraine and uses obfuscation techniques like Telegram-based C2 resolution, NTFS ADS, and malicious LNK files, while other threat clusters and APT28 continue to target…
Google released Android security patches for June 2026 that address 124 vulnerabilities, including CVE-2025-48595, a high-severity Framework flaw that is already showing signs of limited, targeted exploitation. The update also fixes additional issues in the System component and includes kernel and chipset patches from Imagination Technologies, MediaTek, Qualcomm, and Unisoc. #CVE-2025-48595…
President Donald Trump signed an executive order creating a voluntary federal process to review the national security risks of advanced AI systems for up to 30 days before public release. The policy drew mixed reactions as it aimed to protect critical infrastructure and cyber defenses while raising concerns about government discretion,…
A threat actor is using an AI-assisted ransomware toolkit to automate Active Directory discovery and rapidly develop EDR-bypass payloads tested against Sophos, CrowdStrike, and Microsoft defenses. Sophos found the operation was human-driven but heavily accelerated by Cursor and Claude Opus, with modular loaders, Cobalt Strike profiles, and other components built to evade detection. #Sophos #CrowdStrike #Microsoft #Cursor #ClaudeOpus #CobaltStrike #ActiveDirectory
WeedHack is a large-scale malware-as-a-service infostealer campaign targeting Minecraft players, with more than 116,000 infected systems since January. It spreads through malicious Minecraft mods, clients, cheats, and utilities promoted on YouTube and via SEO poisoning, while its operators use a dashboard to track stolen data and compromised systems. #WeedHack #Minecraft #McAfee
Hackers are actively exploiting CVE-2026-8206 in the Kirki – Freeform Page Builder, Website Builder & Customizer plugin to hijack WordPress user accounts, including administrator accounts. Wordfence blocked more than 222 attack attempts in 24 hours, and site owners are urged to upgrade to version 6.0.7 immediately or disable the plugin. #CVE-2026-8206 #Kirki #Wordfence
The Trump administration issued a revised executive order that takes a lighter, voluntary approach to federal testing of frontier AI models before release, shortening the access window to up to 30 days and removing any implication of mandatory licensing. The order also creates a new interagency cybersecurity clearinghouse led by Treasury while raising questions about implementation, oversight, and possible politicization of AI model vetting. #DavidSacks #MarkWarner #NSA #CISA #OfficeoftheNationalCyberDirector
The Pentagon is pushing to integrate cyber operations into all military planning and to build security into AI systems from the start. Defense officials say future conflicts will depend on blending cyber, space, and kinetic effects while avoiding the mistake of treating security as an afterthought. #Pentagon #DefenseDepartment #AI
Microsoft is investigating a widespread Exchange Online service issue that is disrupting email send and receive functions for customers across North America, APAC, and Europe. Affected users are seeing SMTP deferrals and connection errors while Microsoft works to identify the root cause and clear mail queue backlogs. #ExchangeOnline #Microsoft #EX1331830
Google has released an Android update that patches 124 vulnerabilities, including CVE-2025-48595, a zero-day privilege escalation flaw in the Android Framework that may have been used in limited, targeted attacks. The update also fixes multiple critical and high-severity issues across Android System, Kernel, and components from Qualcomm, MediaTek, Unisoc, and Imagination…
A single debug flag left enabled in six Microsoft 365 Android apps allowed untrusted Android apps to receive Microsoft access tokens that should have been blocked. Microsoft fixed the flaw, assigning CVE-2026-41100, CVE-2026-41101, and CVE-2026-41102, after Enclave confirmed the issue across Word, PowerPoint, Excel, Microsoft 365 Copilot, Microsoft Loop, and OneNote…
Two June 2, 2026 reports present different views of enterprise security: the CSA says AI-driven attacks and exploitable vulnerabilities are outpacing visibility and response, while FireMon argues the main issue is weak human control over existing firewall policy. Together, they show that organizations are struggling both to spot what matters fast…