Nearly a million passports and photo IDs were left unprotected on the public internet

Typing a few letters and numbers into my web browser, I find myself gaping at the identity documents of complete strangers. The passport of a young woman from Germany. The passport of a man from Spain with glasses resti…

https://www.theverge.com/tech/947157/passports-data-breach-cannabis-club-systems-nefos-puffpal

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🟠 CVE-2026-49218 - High (7.5)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crash...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49218/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-49218

🚨 EUVD-2026-36165

📊 Score: 9.6/10 (CVSS v3.1)
📦 Product: boxlite
🏢 Vendor: boxlite-ai
📅 Updated: 2026-06-10

📝 Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sand...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36165

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//shentelcommunicatiionsserverupgrade[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a29fa9c3b775000098bb0e8
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple’s new Siri AI knows when to shut up

Apple's new Siri AI is finally here, and so far, it seems like it works. I have access and have been messing around with it, and my biggest impression so far is that Siri AI is quite curt - which I mean as a compliment.…

https://www.theverge.com/tech/948155/apple-siri-ai-chatbot-personality

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🔴 CVE-2026-46695 - Critical (10)

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46695/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-46695

🔴 CVE-2026-46703 - Critical (9.6)

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46703/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-46703

🟠 CVE-2026-42305 - High (8.8)

Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior to 1.2.5 have an arbitrary file write leading to remote code execution when cloning or checking out a malicious Git repository o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-42305

ASUS MyASUS: SYSTEM Privilege Escalation Disclosed After 98 Days, Patch Link Remains Circular https://deafnews.it/en/article/asus-myasus-system-privilege-escalation-disclosed-after-98-days-patch-link-remains-circular #Cybersecurity

Framework delays its first Laptop 13 Pro shipments by a month

The Framework Laptop 13 Pro is delayed. The new 13-inch Framework flagship was set to launch in June, but shipments from the first batch are now expected in July - and there's still a chance some shipments could slip to…

https://www.theverge.com/gadgets/948044/framework-laptop-13-pro-delay-shipment-july-august

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

#chrome extension Ocean Floor seems malicious. Its #cybersecurity badness score is 85/100!

```json
{"id": "lflpoohnikdcjjphblgklcdepmdppodc", "score": 85, "platform": "chrome", "name": "Ocean Floor"}
```

#chrome extension Mint Glacier – Clean Mini seems malicious. Its #cybersecurity badness score is 100/100!

```json
{"id": "gnmnagcjdnfkcccmegohnfmnieikhnon", "score": 100, "platform": "chrome", "name": "Mint Glacier \u2013 Clean Mini"}
```

#chrome extension Orchid Bloom seems malicious. Its #cybersecurity badness score is 86/100!

```json
{"id": "ikbhljpedngpgfdbmekdbjcpfkdcloej", "score": 86, "platform": "chrome", "name": "Orchid Bloom"}
```

2019 - the hacker, not the year - is at it again.

Not only have they compromised a whole mess of customer data of a WA publisher, but it looks like they were sending unauthorised emails while they were in the network.

Seems to be a regular part of their playbook, and even yours truly has gotten some attention from them. It's always odd to find a cyber criminal in your inbox...

#databreach #cybersecurity

https://www.cyberdaily.au/security/13728-exclusive-aussie-educational-publisher-r-i-c-publications-investigating-breach-after-customer-data-published-online

Possible Phishing 🎣
on: ⚠️hxxps[:]//135461223[.]site/no/405/9b9f2577-cd35-401b-82b9-3b393263e811/732538/x
🧬 Analysis at: https://urldna.io/scan/6a2959833b775000098bad4d
#cybersecurity #phishing #infosec #urldna #scam #infosec

Bluesky is getting ‘communities’

Bluesky will be getting "communities," which will function as smaller spaces where you can "go deeper and hang out with people who care about the same stuff" sometime this year, according to head of product Alex Benzer.…

https://www.theverge.com/tech/948215/bluesky-communities-at-protocol-atmosphere-reddit

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

#Starmer gives tech firms ultimatum to block explicit images on children’s phones

https://www.theguardian.com/technology/2026/jun/08/starmer-tech-firms-ultimatum-block-explicit-images-children-phones

#privacy #censorship #cybersecurity #politics #UK #AgeVerification

🚨 EUVD-2026-36112

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: snappy
🏢 Vendor: KnpLabs
📅 Updated: 2026-06-10

📝 Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36112

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36111

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: snappy
🏢 Vendor: KnpLabs
📅 Updated: 2026-06-10

📝 Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1, on POSIX, escapeshellarg(‘/usr/bin/wkhtmltopdf’) returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters inclu...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36111

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36109

📊 Score: 8.4/10 (CVSS v3.1)
📦 Product: atril, atril
🏢 Vendor: mate-desktop
📅 Updated: 2026-06-10

📝 Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36109

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//1sh[.]co/e3c9dfb6#amVubnlAbG5wLmNvLnVr
🧬 Analysis at: https://urldna.io/scan/6a296e073b775000066b5219
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-36110

📊 Score: 8.8/10 (CVSS v3.1)
📅 Updated: 2026-06-10

📝 A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36110

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36108

📊 Score: n/a
📦 Product: Chrome
🏢 Vendor: Google
📅 Updated: 2026-06-10

📝 Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High)

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36108

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36106

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Metrics::Any::Adapter::SignalFx
🏢 Vendor: PEVANS
📅 Updated: 2026-06-10

📝 Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections.

The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by newlines, to be sent per packet.

Metr...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36106

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36107

📊 Score: 5.4/10 (CVSS v3.1)
📦 Product: Symantec Endpoint Protection CleanWipe Removal Tool
🏢 Vendor: Broadcom
📅 Updated: 2026-06-10

📝 CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected syst...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36107

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36103

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: s2n-quic
🏢 Vendor: aws
📅 Updated: 2026-06-10

📝 Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote actor to cause a denial of service (degraded availability) by sending crafted QUIC Initial packets.

To remediate this issue, users should...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36103

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36105

📊 Score: n/a
📦 Product: Metrics::Any::Adapter::DogStatsd
🏢 Vendor: PEVANS
📅 Updated: 2026-06-10

📝 Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections.

The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by newlines, to be sent per packet.

Metrics::Any::Ada...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36105

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-36104

📊 Score: n/a
📦 Product: Metrics::Any::Adapter::Statsd
🏢 Vendor: PEVANS
📅 Updated: 2026-06-10

📝 Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections.

The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent per packet.

The send method does not validate the con...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36104

#cybersecurity #infosec #euvd #cve #vulnerability

High-severity vulnerability in #Linux caused by a single faulty character

https://arstechnica.com/security/2026/06/a-single-errant-character-in-the-linux-kernel-allows-attacker-to-gain-root/

#FOSS #cybersecurity

Android 17 QPR1 Beta 4 is ready to share its latest bug fixes

Hopefully these new builds are almost done sorting out glitches.

https://www.androidauthority.com/android-17-qpr1-beta-4-3676575/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

"CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats"

"“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesday."

https://www.wired.com/story/cisa-ai-vulnerability-directive/

#Cybersecurity

📣🚫 The FBI has seized 13 fake consulting websites that officials say targeted U.S. clearance holders with paid research work designed to obtain sensitive government information.

Read: https://hackread.com/fbi-seizes-china-fake-consulting-sites-us-clearance/

#CyberSecurity #CyberCrime #Spying #Scam #China #FBI

Lenovo’s rugged ThinkTab X11 is finally available in the US

Looking for a durable tablet? Lenovo's new ThinkTab X11 has made it to the US.

https://www.androidauthority.com/lenovo-thinktab-x11-on-sale-3676566/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxp[:]//netflix-clone-rust-five[.]vercel[.]app/
🧬 Analysis at: https://urldna.io/scan/6a2959923b775000054ad84d
#cybersecurity #phishing #infosec #urldna #scam #infosec

You can just tell the Instagram algorithm what you want now

Instagram is going to let you tweak what its algorithm shows you on your main feed. With the Your Algorithm feature, "you can now see the topics we think you're interested in, and change them, across all the major parts…

https://www.theverge.com/tech/947898/meta-instagram-your-algorithm-main-feed-tell

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🚨 EUVD-2026-36051

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: bsimvis
🏢 Vendor: MISP
📅 Updated: 2026-06-10

📝 A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, HTML attributes, inline...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36051

#cybersecurity #infosec #euvd #cve #vulnerability

Miasma Worm Compromises 73 Microsoft GitHub Repositories in Supply Chain Attack

Microsoft disabled 73 GitHub repositories after the Miasma worm compromised developer credentials to inject password-stealing malware into Azure and AI development tools. The supply chain attack exploited OIDC tokens to bypass security scanners and harvest cloud identities and CI/CD secrets.

**If you build or deploy software using Azure Functions, GitHub Actions, or the Durable Task tools, stop using floating version tags like @v1 and switch to a safe deployment method check the as Azure CLI, Azure DevOps, or Zip Deploy for possible compromise and loading of the libraries in the affected period. If you did load them, rotate secrets immediately.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/miasma-worm-compromises-73-microsoft-github-repositories-in-supply-chain-attack-y-n-e-9-a/gD2P6Ple2L

The AirPods Pro 3 are $179, their best-ever price

AirPods Pro 3 | Photo by Amelia Holowaty Krales / The Verge Ahead of Prime Day, the Apple AirPods 3 wireless earbuds have hit their lowest price so far. Originally $249 (though commonly selling somewhere between $200 an…

https://www.theverge.com/gadgets/947719/airpods-pro-3-walmart-deal-sale

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

📰 Microsoft's Record-Breaking June Patch Tuesday: Over 200 Flaws and Three Zero-Days Patched

🚨 Microsoft's June 2026 Patch Tuesday is a record-breaker, fixing over 200 flaws, 33 critical RCEs, and 3 zero-days. A potentially wormable kernel bug (CVE-2026-45657) requires immediate patching. ⚠️ #PatchTuesday #CyberSecurity #ZeroDay

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/microsoft-june-2026-patch-tuesday-fixes-record-200-flaws-and-three-zero-day…

📰 Energy Sector in Crosshairs: 66% of APT Campaigns Target Utilities, Report Finds

🚨 New report: Global energy sector is the top target for nation-state hackers. 66% of all APT campaigns in the last 3 months hit energy & utilities, with actors from China, Russia & North Korea leading the charge. ⚡️ #CyberSecurity #APT #Energy

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/energy-and-utilities-sector-heavily-targeted-by-nation-state-apt-groups/?utm_s…