Security Feed

1. Executive summary On 22 June 2026, the ransomware group "BrainCipher" listed sterlinggloballtd.com, a UK-based entity, on its data-leak

1. Executive summary Microsoft's Detection and Response Team (DART) responded to a multi-stage intrusion in which two unrelated threat actors operated

1. Executive summary The 22 June Check Point weekly bulletin surfaces multiple active-exploitation events directly relevant to EMEA financial services. Splunk Enterprise (CVE-

1. Executive summary MISP core (the open-source threat-intelligence sharing platform) contained multiple broken access-control vulnerabilities in which authorisation checks were performed

1. Executive summary Fortinet has confirmed a large-scale credential-harvesting campaign, tracked as FortiBleed, that has produced a database of over 86,000

1. Executive summary Between 11–12 June 2026, threat actors compromised market intelligence platform Klue via a legacy credential associated with an integration service,

1. Executive summary Market intelligence platform Klue has confirmed a security incident in which attackers abused a compromised legacy credential tied to an integration

1. Executive summary A new ransomware operation dubbed Prinz Eugen has been observed targeting organisations with a hands-on-keyboard approach, prioritising recently modified

1. Executive summary Microsoft has attributed the compromise of more than 140 npm packages in the @mastra scope to the North Korean state-sponsored

1. Executive summary A dataset dubbed "FortiBleed" containing valid administrative and SSL VPN credentials for approximately 73,932 Fortinet FortiGate firewall URLs

1. Executive summary CrowdStrike has published Part 1 of a two-part series documenting abuse of Microsoft's ClickOnce deployment technology. ClickOnce is

1. Executive summary Between 11–17 June 2026, threat actors compromised the backend of Klue, a market-intelligence platform that integrates with multiple SaaS