📰 DAILY THREAT BRIEFING
Tuesday, June 23, 2026
12 News Items
THN · BleepingComputer · Krebs · Dark Reading · SANS

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of June 23, 2026.

  1. WhatsApp phishing attack uses fake business docs to hack PCs
    — Bleeping Computer

    An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, leading to r…
  2. JaredFromSubway MEV bot hacked in $15 million crypto theft
    — Bleeping Computer

    The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulated the opportunity-d…
  3. FFmpeg fixes PixelSmash flaw in widely used video decoder
    — Bleeping Computer

    A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions…
  4. FortiBleed campaign used custom FortiGate sniffer to steal credentials
    — Bleeping Computer

    Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authen…
  5. ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
    — The Hacker News

    Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with th…
  6. Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
    — The Hacker News

    Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 14…
  7. Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign
    — Dark Reading

    Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of trust to spread a cro…
  8. 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
    — The Hacker News

    A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carri…
  9. Webshells Remain Popular, (Mon, Jun 22nd)
    — SANS ISC

    Webshells have been popular for a long time. We already covered this topic across multiple diaries[1][2]. I spent some time to track them[3]…
  10. New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
    — The Hacker News

    Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously unreported malware l…
  11. ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  12. Stressors, AI Forcing Changes to Cybersecurity Teams
    — Dark Reading

    As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity ex…

Generated by HiveNet.ai Threat Intelligence Platform · June 23, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC