Cybersecurity News | Daily Recap [08 Jun 2026]

Active Exploits

• Hackers are exploiting a WordPress flaw in Everest Forms and a SolarWinds Serv-U vulnerability in the wild to compromise public-facing systems – Everest Forms, Serv-U
• Check Point tied recent VPN zero-day attacks to the Qilin ransomware gang, underscoring continued exploitation of edge devices by financially motivated actors – VPN Zero-Day

Ransomware & Extortion

• The Silent Ransom Group is using DNS fast flux and fake IT support calls to target law firms and evade takedowns – Silent Ransom, Fake IT Calls
• The same threat activity highlights broader extortion tradecraft, including infrastructure resilience and social engineering aimed at high-value professional services – DNS Fast Flux

Data Breaches

• Oxford University disclosed a breach after its careers platform was hacked, exposing user data from a third-party service – Oxford Breach
• Lansing Community College said a data breach impacted 174,000 people, marking another large-scale education-sector exposure – LCC Breach
• Meta AI support issues led to stolen 20,000+ Instagram accounts, showing how support-channel abuse can trigger mass account compromise – Meta AI Hack

Spyware & Platform Security

• WhatsApp detected NSO Group violating a no-hacking court order, renewing scrutiny of commercial spyware operations and platform abuse – NSO Case
• OpenAI is rolling out new ChatGPT account security controls as AI platforms face increasing pressure to harden user protections – ChatGPT Controls

Botnets & Malware

• The C0XMO botnet is spreading via a DD-WRT router flaw while also killing rival malware, highlighting competitive botnet behavior on edge devices – C0XMO Botnet

AI Policy & Security

• Policy debate around AI security continues as experts call for accountability over overregulation, while a Trump order pushes voluntary frontier model testing – AI Accountability, AI Order
• Coverage of Intelligent Terminal and other AI-enabled tools reflects growing interest in how Windows workflows are being reshaped by embedded automation – Intelligent Terminal

Threat Research & M&A

• A weekly threat recap highlighted PyPI, npm, GitHub Actions, cloud/dev-tool credential theft, and CI/CD abuse, alongside ransomware, phishing loaders, botnets, and Kubernetes/container targeting – Weekly Recap
• Cybersecurity M&A remained active with 26 deals announced in May 2026, signaling continued consolidation across the sector – M&A Roundup

Cybersecurity News | Daily Recap – hendryadrian.com