Author: Staff Writer

Essential Insights Eastman Kodak confirmed a cybersecurity breach after ShinyHunters claimed to have stolen over 2.2 million records containing customer PII and internal data, with the breach first identified on June 15, 2026. The breach involved unauthorized but limited access to Kodak’s data; the company engaged cybersecurity experts and law enforcement but has not verified the full extent of the theft. ShinyHunters, known for large-scale data theft, issued a final warning demanding contact by June 18, 2026, threatening to release the data publicly if ignored. Kodak has not disclosed specifics about the types of data accessed or confirmed breach notification…

Top Highlights Organizations are struggling to patch vulnerabilities fast enough; only 30-40% of known exploited vulnerabilities are fixed within the first week despite significant investments. Ransomware is involved in nearly half (48%) of breaches, with most victims being SMBs, and refusing to pay ransom is increasingly common, with median payouts dropping. Third-party breaches have surged 60%, highlighting the need for organizations to include vendor compromise scenarios in their incident response exercises. AI accelerates exploitation, with attackers using AI tools for rapid, sophisticated attacks, shrinking response windows and emphasizing the urgency for advanced, realistic incident response drills. Underlying Problem The 2026…

Fast Facts The Anubis ransomware group targeted Italy’s Port of Ancona through a spear-phishing attack, encrypting crucial systems and exfiltrating sensitive data, causing regional maritime disruptions. The hackers demanded a $10 million Bitcoin ransom, threatening to publish stolen information if unpaid within a week, highlighting the financial and operational threats to critical infrastructure. The attack exploited IT vulnerabilities like unpatched systems and insecure accounts, demonstrating how cybercriminals can impact physical transportation sectors without directly targeting operational technology. The incident underscores the growing cyber risks to maritime and critical infrastructure, emphasizing the need for robust cybersecurity measures amid increasing threats from…

Quick Takeaways Google has released a security update for Chrome (version 149.0.7827.155/156), fixing 33 vulnerabilities, including critical use-after-free memory corruption flaws that could enable remote code execution. Seven critical vulnerabilities (CVE-2026-12437 to CVE-2026-12443) involve use-after-free bugs across core components like WebShare, WebView, Credentials, and Passwords, which attackers could exploit via malicious web pages. Additional high-severity issues include buffer overflows and validation flaws in WebRTC, Extensions, and other components, posing risks of data leaks, sandbox escapes, and chain attacks. Users are urged to update their Chrome browsers immediately through Settings, as delaying exposes systems to significant exploitation risks, with Google employing…

Quick Takeaways Attackers are increasingly targeting small and medium-sized businesses through supply chains and trusted service providers. The shift to intelligence-led security aims to identify emerging risks by analyzing real-time adversary behaviors beyond basic detections. Geopolitical tensions and nation-state activities are driving sophisticated cyber threats, demanding strategic intelligence to anticipate advanced attacks. Threat, Attack Techniques, and Targets Blackpoint Cyber has appointed Erin Whitmore as the leader of its threat intelligence team. The focus of the team is on understanding and tracking cyber adversaries. This includes ransomware groups, nation-state attackers, and other advanced threat actors. These attackers are increasingly targeting supply…

Essential Insights The Cyber Europe 2026 exercise, organized by ENISA, brought together over 5,000 stakeholders across Europe to test and improve cybersecurity preparedness and incident response in critical transportation sectors, especially rail and maritime networks. The two-day simulation involved large-scale, realistic cyberattacks on transport infrastructure, including port, rail, and ticketing systems, exposing vulnerabilities like legacy system integration and dependency on third-party supply chains. The exercise tested the EU Cybersecurity Reserve and the revised EU Cybersecurity Blueprint, emphasizing coordinated action across technical, operational, and political levels to manage cybersecurity crises effectively. Findings from the exercise will inform ongoing improvements, with a…

Fast Facts Hackers increasingly exploit AI assistants like Anthropic’s Claude and OpenAI’s Codex to automate reconnaissance, exploitation, and data exfiltration, using natural-language prompts to manage complex multi-stage attacks. Attackers imitate authorized red team activities, manipulating AI personas and framing malicious actions as legitimate cybersecurity research to bypass safeguards. The attackers used AI to conduct detailed breach workflows, including service enumeration, vulnerability exploitation, credential harvesting, database replication, and sophisticated data exfiltration, even designing distributed cracking architectures. Cloning AI sessions, detailed logs, and session histories created rich forensic evidence, exposing operational security flaws and underscoring the need for stronger credential protections and…

Fast Facts A sophisticated cyberattack targets Windows desktop users via compromised legitimate websites, utilizing a multi-layered approach involving EtherHiding blockchain payloads, social engineering, and memory-only malware loading, making detection difficult. The attack chain begins with a compromised WordPress site that silently communicates with blockchain networks to fetch malicious code, which shares a fake CAPTCHA overlay urging users to run a command that loads a remote DLL, bypassing standard security warnings. If executed, the GULoader malware can enable credential theft or full remote access, but behavioral detection tools successfully neutralized the threat within 300 milliseconds by monitoring unusual activity of rundll32.exe.…

One-third of IT assets lack critical security controls, due to visibility gaps and fragmented security tools. Nearly 19% of assets are end-of-life, often overlooked even after migrations, exposing organizations to ongoing risks. Attackers are shifting tactics to exploit remote access services and legacy systems, with many vulnerabilities having available patches. Effective risk management requires unified, contextualized visibility and continuous verification, which improves security posture significantly. The Hidden Gaps in Daily IT Operations Many security teams know that their attack surface is growing. They face high volumes of alerts and often lack clear visibility of all assets. This makes it hard…

Top Highlights Offensive AI enables rapid attack automation, reducing discovery and exploitation time from days to minutes, demanding faster defense responses. Security programs must shift from reactive to continuous, real-time investigation, detection, and hunting to keep pace with AI-driven threats. Building AI-native security operations — automating investigation, hunting, and detection evaluation — shortens incident response times and operationalizes context. Moving operational focus off human schedules toward automated, machine-speed systems is vital for security teams to effectively defend in an AI-enhanced threat landscape. Adapting Security Strategies in an Accelerating Threat Landscape Recent advancements in AI, like Anthropic’s Mythos, highlight a crucial…