Huawei Releases June 2026 Security Update for HarmonyOS and EMUI Devices

Huawei's June 2026 security update patches 26 vulnerabilities, including three critical third-party library flaws and a high-severity path traversal bug in the SMS application. These vulnerabilities could allow attackers to compromise system availability, integrity, and confidentiality across HarmonyOS and EMUI devices.

**This month brings a critical batch of fixes for Huawei flagship devices, resolving third-party flaws and framework bugs. Update all Huawei flagship devices ASAP to the latest patched version HarmonyOS (versions 4.0.0 through 6.1.0) and EMUI (version 14.0.0 and above) to mitigate these critical third-party library risks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/huawei-releases-june-2026-security-update-for-harmonyos-and-emui-devices-f-t-5-d-s/gD2P6Ple2L

FlutterBridge Deploys FlutterShell Backdoor on macOS Systems via Malvertising

Operation FlutterBridge uses fraudulent Google Ads accounts to distribute fake macOS applications that silently install the FlutterShell.

Pulse ID: 6a23004e861cb5aabb57d946
Pulse Link: https://otx.alienvault.com/pulse/6a23004e861cb5aabb57d946
Pulse Author: cryptocti
Created: 2026-06-05 16:58:54

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #Google #GoogleAds #InfoSec #Mac #MacOS #Malvertising #OTX #OpenThreatExchange #RAT #bot #cryptocti

Forschungsteams haben einen KI-Wurm veröffentlicht, der sich grundlegend von bekannter Malware unterscheidet: Er entwickelt für jedes Ziel eigenständig angepasste Exploits, auch für Schwachstellen, die nach dem Trainings-Cutoff der eingesetzten LLMs liegen. Im isolierten Testbetrieb: ca. 75 % des Netzwerks angegriffen, Replikation auf ca. 65 % der Maschinen. #Cybersecurity #Malware #LLM #ITSicherheit #AIResearch

Asin Spyware Campaign Targets Arabic Journalists and OSINT Researchers via Fake Conflict Maps https://deafnews.it/en/article/asin-spyware-campaign-identified-targeting-arabic-speaking-users-via-fake-conflict-maps #Cybersecurity

Mysterious new Philips Hue icons could hint at plans to take on Nanoleaf

Philips Hue may have accidentally revealed two new upcoming products.

https://www.androidauthority.com/philips-hue-mysterious-icons-3675084/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

📣🚨 Atlas Menu, a GTA V and CS2 cheat service, suffered a data breach exposing 64,000 users’ emails, IPs, support tickets, and hashed passwords.

Read: https://hackread.com/atlas-menu-data-breach-exposes-gta-v-cs2-cheat-users/

#AtlasMenu #DataBreach #Cybersecurity #Gaming #GTAV #CS2

Chrome is now ‘faster than ever,’ and Google wrote a technical love letter to prove it

Google lays out the engineering behind Chrome's recent performance boost.

https://www.androidauthority.com/google-chrome-faster-than-ever-benchmarks-3674956/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

#chrome extension Free Vpn For Chrome Free seems malicious. Its #cybersecurity badness score is 95/100!

```json
{"id": "acigamgkhbdgmhjgblcliidogdlnbfff", "score": 95, "platform": "chrome", "name": "Free Vpn For Chrome Free"}
```

Possible Phishing 🎣
on: ⚠️hxxps[:]//itau-landing[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a21a1143b7750000881417e
#cybersecurity #phishing #infosec #urldna #scam #infosec

New by me: Shadow AI Is the New Shadow IT, but Blocking It Won't Work

https://www.kylereddoch.me/blog/shadow-ai-is-the-new-shadow-it-but-blocking-it-wont-work/

#Cybersecurity #InfoSec #AISecurity #ShadowAI #MSP

Samsung’s next Galaxy Watches just cleared a major hurdle — but there’s a catch

Regulatory filings confirm both the Galaxy Watch 9 and Watch Ultra 2 stick with the same 10W charging speeds.

https://www.androidauthority.com/galaxy-watch-9-watch-ultra-2-regulatory-listings-3675126/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🚨 EUVD-2026-34815

📊 Score: 7.8/10 (CVSS v3.1)
📅 Updated: 2026-06-05

📝 A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34815

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-34814

📊 Score: 7.8/10 (CVSS v3.1)
📅 Updated: 2026-06-05

📝 A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at a client-controlled offset, allowing a stack buffer overf...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34814

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-34813

📊 Score: 7.8/10 (CVSS v3.1)
📅 Updated: 2026-06-05

📝 A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The server allocates a 256 byte stack buffer but libXfont2's alia...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34813

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-34812

📊 Score: 7.8/10 (CVSS v3.1)
📅 Updated: 2026-06-05

📝 A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connect...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34812

#cybersecurity #infosec #euvd #cve #vulnerability

DentaQuest Data Breach Exposes 2.6 Million Records

DentaQuest, a Sun Life subsidiary, suffered a data breach affecting 2.6 million accounts after the ShinyHunters extortion group claimed to have stolen 234 GB of sensitive healthcare and personal information.

****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/dentaquest-data-breach-exposes-2-6-million-records-7-1-e-p-d/gD2P6Ple2L

🚨New ransom group blog posts!🚨

Group name: dragonforce
Post title: REHA-ACTIV
Info: https://cti.fyi/groups/dragonforce.html

Group name: qilin
Post title: Central Florida Cosmetic & Family Dentistry
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Jay's Catering
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Pro-MEC Engineering Services
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

This chunky little tablet got my kid to clean up his toys

Just a cute little guy. Never underestimate the power that a cheap tablet holds over a kid under six. The Skylight Buddy is a device with one job: to be a cute little guy that helps your kid track routines and chores. I…

https://www.theverge.com/tech/943219/skylight-buddy-kids-calendar-chore-tracker-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

📣🚨macOS users watchout as Reaper, an updated #SHub Stealer variant, is abusing Script Editor to steal your passwords, files, and crypto assets.

Read: https://hackread.com/reaper-macos-infostealer-script-editor-crypto-passwords/

#macOS #Cybersecurity #InfoStealer #Crypto #Password

6 easy ways I make Zorin OS even faster and more secure

Out of the box, Zorin OS is fast and secure, but with a few quick configurations, you can improve both areas.

https://www.zdnet.com/article/take-care-of-these-things-to-improve-security-and-performance-in-zorin-os/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxp[:]//netflix-clone-two-sand[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a21d2f93b775000066ba03b
#cybersecurity #phishing #infosec #urldna #scam #infosec

"My #SSN was exposed in a breach at #Columbia—a #school I have no connection with"

https://arstechnica.com/tech-policy/2026/06/my-ssn-was-exposed-in-a-breach-at-columbia-a-school-i-have-no-connection-with/

#privacy #cybersecurity #DataBreach #university #education #college

https://winbuzzer.com/2026/06/05/claude-writes-80-of-anthropic-code-raising-review-stakes-xcxwbn/

Anthropic says Claude now authors over 80% of Anthropic production code and is targeting a full autonomous self-improving AI system.

#AI #ClaudeCode #Anthropic #Claude #AICoding #GenAI AIAgents #AgenticAI #Cybersecurity

Why isn’t the Trump phone made in the USA?

Where's the Trump phone? We're going to keep talking about it every week. We've reached out, as usual, to ask about the Trump phone's whereabouts. This week, I'm investigating where it might have been built - and why it…

https://www.theverge.com/tech/943852/trump-phone-made-in-the-usa-ftc-assembled-china

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Possible Phishing 🎣
on: ⚠️hxxps[:]//fucat-value[.]com
🧬 Analysis at: https://urldna.io/scan/6a2251a13b775000068cf28b
#cybersecurity #phishing #infosec #urldna #scam #infosec

Google’s Workspace icon redesign is now complete, and Gmail was the last piece

Gmail’s new look marks the end of Google’s massive Workspace redesign.

https://www.androidauthority.com/google-workspace-apps-icon-redesign-completed-3674901/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Aviation enthusiast uses Raspberry Pi and ADS-B radio to create viral real-time airport tracker — open-source 'Skylight' i…

Software engineer Cameron Paczek has developed Skylight, a project that receives ADS-B signals from an RTL-SDR radio antenna and shows the airplanes flying above you on a projector aimed at your ceiling.

https://www.tomshardware.com/raspberry-pi/aviation-enthusiast-uses-raspberry-pi-and-abs-b-radio-to-create-viral-real-time-airport-tracker-open-source-skylight-intercepts-aircraft-signals-and-projects-flight-paths-onto-your-ceiling

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

🟠 CVE-2026-11149 - High (7.5)

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11149/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-11149

🚨 EUVD-2026-34790

📊 Score: 2.7/10 (CVSS v3.1)
📅 Updated: 2026-06-05

📝 A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied, l...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34790

#cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2026-11130 - High (8.8)

Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11130/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-11130

🚨 EUVD-2026-34789

📊 Score: 10.0/10 (CVSS v3.1)
📦 Product: Joomla Content Editor (JCE) extension for Joomla
🏢 Vendor: joomlacontenteditor.net
📅 Updated: 2026-06-05

📝 A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34789

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxp[:]//netflix-clone-azure-ten[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a21f5683b77500004c3efd8
#cybersecurity #phishing #infosec #urldna #scam #infosec