Cybersecurity News | Daily Recap [12 Jun 2026]

Cybersecurity News | Daily Recap [12 Jun 2026]
Daily Recap, urgent patching focus returned as CISA directed federal agencies to address actively exploited Ivanti issues, while Oracle mitigated a PeopleSoft zero-day tied to data theft and Microsoft resolved Windows update failures linked to the WUSA installer. Across breaches and espionage, Novo Nordisk disclosed clinical trials exposure, tchap accounts were reported as affected in France, and threat activity included Iran’s Handala claiming access to Cal Water and Russia’s Void Blizzard facing charges, with ShinyHunters also linked to PeopleSoft exploitation. #Ivanti #CISA #Oracle #PeopleSoft #WUSA #NovoNordisk #tchap #Maine #Handala #CalWater #VoidBlizzard #ShinyHunters #Europol #AudiA6 #ClaudeFable5 #Anthropic #CyberCorps

Exploits & Patching

  • Ivanti and Oracle PeopleSoft flaws are being actively abused, prompting urgent patching guidance as CISA orders federal agencies to fix the Ivanti issue and Oracle mitigates the PeopleSoft zero-day linked to data theft. – Ivanti Patch, Ivanti Attempts, PeopleSoft Alert, PeopleSoft Fix, ShinyHunters Abuse
  • Microsoft fixed Windows update failures tied to the WUSA installer, resolving patching issues that affected system updates. – Windows Fix
  • CISA also told federal agencies to prioritize patches based on risk, highlighting a broader push to reduce exposure to actively exploited vulnerabilities. – Risk Patching

Data Breaches & Exposure

  • Novo Nordisk disclosed a breach affecting clinical trials data, adding to a wave of sensitive healthcare-related incidents. – Novo Breach
  • A Japanese energy firm lost a drive containing data on 10.9 million clients, while French government Tchap accounts were exposed in a breach impacting over 73,000 employees. – Japan Loss, Tchap Leak
  • The Maine breach portal was abused to publish fake breach disclosures, creating confusion around official incident reporting. – Maine Portal

Threat Actors & Espionage

  • Iranian group Handala claimed a hack of Cal Water, underscoring ongoing politically motivated targeting of critical services. – Handala Hack
  • A Russian national was charged over the Void Blizzard espionage campaign, marking a law-enforcement move against cyber-espionage activity. – Void Blizzard
  • ShinyHunters were linked to exploitation of the Oracle PeopleSoft zero-day in data theft attacks, reinforcing their focus on credential and data theft. – ShinyHunters

Ransomware & Crypto Crime

  • Europol disrupted the AudiA6 crypto-laundering service used by ransomware gangs and authorities separately dismantled the same network, cutting off a key cash-out channel. – AudiA6 Bust, AudiA6 Seizure

AI & Industry Debate

  • Coverage around Claude Fable 5 sparked mixed industry reactions, while Anthropic disputed claims of an AI jailbreak, reflecting ongoing scrutiny of model security. – Fable 5, Anthropic Reply
  • CyberCorps is trying to adapt to AI, but budget shortfalls are slowing the shift and raising concerns about workforce readiness. – CyberCorps AI
  • Alert fatigue is emerging as a security risk of its own, as overloaded teams struggle to separate real threats from noise. – Alert Fatigue

Cybersecurity News | Daily Recap – hendryadrian.com