Daily Threat Briefing — Jun 19, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of June 19, 2026.

1. Gentlemen ransomware uses multiple EDR killers to disable defenses
   — Bleeping Computer
   
   The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers…
2. Novo Nordisk Breach Exposes Software Development Pipeline Risk
   — Dark Reading
   
   A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identit…
3. Operation Escaneo Signals Shift in LatAm Threat Landscape
   — Dark Reading
   
   The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination betwe…
4. Nintendo confirms data stolen in WebMD subsidiary cyberattack
   — Bleeping Computer
   
   Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service used inter…
5. FIFA Bug Exposes World Cup Streams to Remote Takeover
   — Dark Reading
   
   A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.
6. ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
   — Krebs on Security
   
   For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic lin…
7. F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
   — The Hacker News
   
   F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code executi…
8. Salesforce Data Thefts Continue via Klue App Compromise
   — Dark Reading
   
   Klue's Battlecards is now the third integrated application that has been compromised to steal customers' Salesforce data, and victims includ…
9. USB worm spreads crypto-stealing malware via Windows shortcut files
   — Bleeping Computer
   
   Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using …
10. Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network
    — The Hacker News
    
    If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name the person w…
11. ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
    — The Hacker News
    
    The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons.…
12. Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
    — The Hacker News
    
    Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. "The clipper…

Generated by HiveNet.ai Threat Intelligence Platform · June 19, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC