Threat Brief: June 26, 2026
Three new GTI-verified campaigns are reported this week. CAMP.26.083 — a suspected East Asia-nexus actor deploying the PING32 remote monitoring and management tool via a VBScript infection chain, has been ...
Three new GTI-verified campaigns are reported this week. CAMP.26.083 — a suspected East Asia-nexus actor deploying the PING32 remote monitoring and management tool via a VBScript infection chain, has been ...
Three new GTI-verified campaigns are reported this week, the most operationally urgent is CAMP.26.053 — an active targeted intrusion campaign against U.S. healthcare, pharmaceutical, and education institutions using heavily obfuscated ...
FortiBleed: Fortinet Firewalls Credential Exposure and Vulnerability Disclosure We are reaching out with an urgent security notice affecting Fortinet firewall and VPN environments. A large-scale attack campaign, now publicly known ...
Palo Alto Networks firewall or GlobalProtect VPN environments are part of this security alert. What is the Issue? A security flaw (CVE-2026-0257) has been discovered in Palo Alto Networks ...
Three GTI-verified campaigns are reported this week, sourced from Google Threat Intelligence (GTIG). The most critical is CAMP.26.081, a Russia-nexus actor conducting AI-assisted cloud-native intrusions targeting AWS, Azure, and Bitbucket ...
This notification is to inform you of an important security vulnerability that has been actively exploited in the wild and may affect your Check Point VPN environment. Immediate action is ...
Three new GTI-verified campaigns are reported this week with the most critical being CAMP.26.053, a targeted intrusion campaign deploying heavily obfuscated, Base64-encoded PowerShell against healthcare and pharmaceutical organizations in the ...
Three GTI-verified campaigns are reported as new this week, sourced from Google Threat Intelligence (GTI) and Mandiant. The most operationally urgent is CAMP.26.070 (Luna Moth), a financially motivated vishing and ...
Two GTI-verified new campaigns are reported this week, sourced from Google Threat Intelligence (GTI) and CISA. The most operationally significant is CAMP.26.064, a new ClickFix-based campaign whose GTI narrative description ...