Threat Brief: June 12, 2026

Three GTI-verified campaigns are reported this week, sourced from Google Threat Intelligence (GTIG). The most critical is CAMP.26.081, a Russia-nexus actor conducting AI-assisted cloud-native intrusions targeting AWS, Azure, and Bitbucket environments — actively targeting Healthcare, Pharmaceuticals, and Technology as recently as June 11, 2026. Also new: CAMP.26.080, a financially motivated actor deploying malicious LNK payloads via fake browser update lures (first observed June 1), and a newly disclosed medical device vulnerability, CVE-2026-0611, an unauthenticated RCE (CVSS 9.8) in Spacelabs Healthcare Cardiac monitoring software.an unauthenticated