Latest

Endpoint Security

Rokarolla Android Banking Trojan Enables Device Takeover

Greg Sirico  •  June 16, 2026

Newly surfaced Android-based banking Trojan gives threat actors near-total control over infected devices, letting them steal user credentials for direct access to financial accounts, says researchers. Rokarolla tricks users into side-loading malicious versions of popular, high traffic apps.

Government

Trump Memo Overhauls Cyber Rules for Classified Networks

Chris Riotta  •  June 16, 2026

A new White House directive rescinds a 1990 policy and a 2022 Biden memo, setting binding cybersecurity baselines for systems that process classified data and gives the director of the National Security Agency emergency directive authority across federal agencies.

Agentic AI

The AI Accountability Gap CIOs Can't Ignore

Jennifer Lawinski  •  June 16, 2026

A new IBM Institute for Business Value survey finds two-thirds of CIOs and CTOs are accountable for AI systems they don't fully control. The survey of 2,000 tech executives details rising AI agent incidents and recommends infrastructure, governance and financial fixes.

Artificial Intelligence & Machine Learning

Restore Fable and Mythos Access, Cybersecurity Leaders Urge

Mathew J. Schwartz  •  June 16, 2026

New export controls on artificial intelligence startup Anthropic's Fable 5 and Mythos large language models, over their vulnerability-discovery capabilities, must be lifted, not least because Chinese models will soon offer equal capabilities, cybersecurity experts warned the Trump administration.

Fraud Management & Cybercrime

Chinese Hacking Firm Upgrades With New Windows Backdoor

Tiffany Wang  •  June 16, 2026

Eset uncovered two previously undocumented Windows variants of the China-linked SprySocks backdoor tied to FishMonger and iSoon, revealing expanded espionage capabilities, rootkit-based stealth and continued targeting of government organizations across Asia and Central America.

Identity & Access Management

Hacker: 'I Could Have Rickrolled the World Cup'

Anviksha More  •  June 16, 2026

A white-hat hacker discovered a now-fixed authorization flaw in a FIFA World Cup 2026 platform that allowed users to access a World Cup camera feed and other restricted resources. "An attacker could have rickrolled the entire FIFA World Cup," wrote Bobdahacker.

Incident & Breach Response

South Korea Fines Coupang $409M Over Massive Data Breach

Tiffany Wang  •  June 16, 2026

South Korea's privacy regulator fined Coupang a record 624.7 billion won after concluding that weak authentication controls, insider access abuse, evidence destruction and unauthorized data collection contributed to the exposure of personal information belonging to 33.7 million people.

Advanced SOC Operations / CSOC

Cyber Resilience Summit Dallas Prioritizes Risk Management

Poulami Kundu  •  June 16, 2026

From boardroom persuasion to AI-powered SOCs, ISMG's Cyber Resilience Summit Dallas gave senior security and risk leaders a playbook for the age of inevitable disruption, with sessions spanning zero trust, human risk reduction, threat preemption and governance as a foundation of resilience.

Endpoint Security

US FCC Eases Router Ban for Cable ISPs

Greg Sirico  •  June 15, 2026

The U.S. Federal Communications Commission approved a cable industry lobbying group's request to grant large scale internet service providers with a waiver from Trump administrations' current ban on consumer grade foreign-made routers.

►

Agentic AI

The Next Enterprise AI Challenge Is Agent Sprawl

Jennifer Lawinski  •  June 15, 2026

AI is evolving from a productivity tool into a system of execution capable of making decisions and taking action. Hitachi Digital Services CTO Prem Balasubramanian explains why governance, reliability and agent management will determine enterprise AI success.

Cybercrime

ShinyHunters Hits Universities Via Oracle Zero-Day

Chris Riotta  •  June 15, 2026

ShinyHunters exploited a critical zero-day in Oracle PeopleSoft to breach more than 100 organizations globally, researchers at Mandiant and Google's Threat Intelligence Group said, with universities and colleges accounting for the majority of confirmed targets in the active extortion campaign.

3rd Party Risk Management

Labcorp Agrees to Pay $35M to Settle AMCA Data Breach

Marianne Kolbasuk McGee  •  June 15, 2026

Medical laboratory testing giant Labcorp has agreed to pay $35 million to settle class action litigation stemming from a 2018 hacking incident on now-defunct American Medical Collections Agency. Labcorp reported the vendor breach in 2019 as affecting nearly 10.3 million patients.