Daily Threat Briefing — Jun 29, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of June 29, 2026.

1. Data breach exposes up to 14.2 million email logins at six ISPs
   — Bleeping Computer
   
   Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems …
2. YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)
   — SANS ISC
   
   YARA-X's 1.18.0 release brings 3 improvements and 2 bugfixes.
3. Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
   — The Hacker News
   
   The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campai…
4. Clean GitHub repo tricks AI coding agents into running malware
   — Bleeping Computer
   
   An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remain…
5. OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
   — The Hacker News
   
   OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as par…
6. Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk
   — Dark Reading
   
   Rising threats from third-party actors are forcing institutions to play defense to protect student data from ransomware and other attacks.
7. FBI: Russian hackers now target Signal backup recovery keys
   — Bleeping Computer
   
   The FBI and CISA are warning that a phishing campaign targeting Signal users tied to Russian intelligence services has evolved to steal Sign…
8. CISA sets urgent deadline to fix Cisco flaw exploited in attacks
   — Bleeping Computer
   
   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is giving federal agencies until Sunday to patch a vulnerability in Cisco U…
9. FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
   — The Hacker News
   
   The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step…
10. AI Decline? Confidence in Autonomous Penetration Testing Falls
    — Dark Reading
    
    Companies are still experimenting with automated AI systems to find security weaknesses, but fewer are relying on the technology.
11. New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
    — The Hacker News
    
    A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts …
12. Cisco Adds NHI to Security Stack With Astrix, WideField Acquisitions
    — Dark Reading
    
    Cisco joins a growing list of security platform providers that are betting that securing the agentic workforce means turning identity into t…

Generated by HiveNet.ai Threat Intelligence Platform · June 29, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC