Loading story…
Recent cybersecurity newsletters have highlighted a range of industry developments, including the intersection of artificial intelligence with trust and compliance, the ongoing adoption of enterprise browsers, and the challenges posed by stagnating security budgets. Reports also discuss the rapid integration of AI in security and development, with concerns about the lack of governance and the inefficiency of manual compliance processes compared to automated solutions. Additionally, there is commentary on the state of the National Vulnerability Database (NVD) and the broader CVE ecosystem, as well as the evolving landscape of software supply chain security.
Other industry updates include coverage of major incidents such as critical infrastructure hacks across the US and Canada, nation-state cyber operations, and breaches affecting telecom backbone providers. Notable discussions reference high-profile media coverage of Chinese cyber activity targeting American infrastructure, the use of AI agents in security operations centers, and the ethical implications of zero-day sales to foreign adversaries. These newsletters serve as a comprehensive resource for security leaders seeking to stay informed about current threats, technology trends, and strategic challenges in the cybersecurity domain.
See the reporting duties and controls this puts on the clock.
11 events from the most recent confirmed update back to the earliest known activity.
The Python Software Foundation declined a U.S. National Science Foundation grant because of contract language related to DEI requirements. The decision became a notable governance and funding dispute in the open-source community.
Chrome announced plans to make HTTPS the default protocol in 2026. The change is intended to reduce insecure HTTP usage and improve baseline web security.
Researchers reported a new Android banking malware family called Herodotus. It was notable for simulating human-like typing behavior to evade fraud and bot-detection systems.
A Russia-linked intrusion set using living-off-the-land techniques was reported targeting Ukrainian entities. The activity was attributed to Sandworm or a closely aligned actor.
Officials and reporting warned about Chinese access to U.S. critical infrastructure networks. The warnings underscored ongoing concern about pre-positioning in strategically important sectors.
Reporting said telecom backbone vendor Ribbon Communications was compromised in an operation attributed to a nation-state actor. The incident was presented as part of broader concern over telecom infrastructure targeting.
New research detailed physical attacks branded TEE.fail that undermine trusted execution environments across Nvidia, AMD, and Intel platforms. The disclosure expanded understanding of hardware-level risks to confidential computing protections.
F5 issued statements about a long-running nation-state intrusion that allegedly resulted in source code theft. The reporting also referenced claims involving 44 zero-days tied to the compromise.
News coverage highlighted hacktivist intrusions in Canada that affected industrial control environments. The reporting framed the activity as a notable escalation from typical website defacements or IT-only disruption.
Security reporting described a suspected nation-state supply-chain campaign using new Windows malware dubbed Airstalk. The malware reportedly abused VMware AirWatch/Workspace ONE MDM APIs for command-and-control.
Government contractor Conduent disclosed a major breach affecting over 10 million individuals. The incident was reportedly claimed by the SafePay ransomware group.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple cybersecurity newsletters published in early January 2026 provide overviews of significant global security events, threat actor activity, and malware campaigns. The Security Affairs newsletters highlight a range of incidents, including a massive breach affecting 17.5 million Instagram users, North Korea-linked Kimsuky APT quishing attacks, a data breach at the Illinois Department of Human Services, and the exploitation of ESXi zero-days by Chinese-speaking hackers. Other notable topics include the spread of the Astaroth banking Trojan via WhatsApp in Brazil, critical vulnerabilities in D-Link DSL routers and Veeam, and intensified attacks on Taiwan’s critical infrastructure by China-linked groups. The newsletters also discuss technical developments such as the use of Pyarmor for obfuscation in the VVS Discord Stealer, malicious npm packages delivering NodeCordRAT, and the Boto-Cor-de-Rosa campaign. Sherpa Intelligence’s "Five for Friday" newsletter similarly aggregates key security news, referencing the Resecurity report on cyber counterintelligence operations against the "Shiny Hunters" group and highlighting ongoing challenges in law enforcement collaboration. The newsletter also covers sector-specific risks, such as cybersecurity gaps in the Water and Wastewater Services sector, and updates on the OWASP Top 10 for 2025. Collectively, these newsletters serve as comprehensive roundups of the week’s most impactful cybersecurity developments, providing CISOs and security teams with a broad situational awareness of current threats, vulnerabilities, and industry trends.
Jun 29, 2026
Recent cybersecurity news covers a wide range of topics, including the evolving threat landscape, regulatory changes, and the persistent risks associated with misconfigurations and legacy systems. Notable highlights include urgent warnings from CISA and other agencies about the Akira ransomware's new, faster variant targeting critical infrastructure, and the release of the updated OWASP Top 10 Web Application Risks for 2025, which now includes "software supply chain failures" as a key concern. Additionally, Microsoft Exchange servers face heightened risk due to the end of support for Exchange 2016 and 2019, with CISA and NSA urging organizations to follow best practices to mitigate imminent threats. In Brazil, banking Trojans such as Coyote and Maverick are actively targeting users, particularly through WhatsApp, resulting in hundreds of organizations being affected. On the regulatory front, the UK has introduced a new Cyber Security and Resilience Bill to strengthen protections for critical sectors, mandating rapid incident reporting and imposing significant penalties for non-compliance. Kenya has launched the "Code Nation" initiative to train over a million tech workers, including cybersecurity specialists, as part of its digital transformation. Meanwhile, industry commentary highlights the growing risks of misconfigurations in platforms like Salesforce, the challenges posed by non-human and AI identities, and the ongoing debate over privacy and surveillance in the EU. These developments underscore the complexity and interconnectedness of today's cybersecurity environment, with organizations urged to stay vigilant and adapt to rapidly changing threats and regulations.
Jun 29, 2026
The start of 2026 has seen a range of significant cybersecurity developments, including regulatory changes, research breakthroughs, and ongoing threat trends. China enacted a major overhaul of its Cybersecurity Law, introducing stricter penalties, immediate enforcement actions, and explicit AI governance requirements, signaling a more aggressive regulatory stance on data security, supply chain compliance, and AI risk management. Meanwhile, research and monitoring efforts have highlighted persistent issues such as the continued leakage of sensitive credentials through public platforms like Postman, despite some improvement in security practices. Additionally, foundational research is exploring the limitations of software-based security for semantic AI communications, advocating for physics-based approaches to protect critical systems from catastrophic manipulation. Industry analysis and newsletters have underscored the growing impact of AI on both cyber offense and defense, with trends pointing to more sophisticated ransomware, the rise of agentic AI threats, and the need for quantum-resilient architectures. Notable incidents, such as the Knownsec data breach, have exposed the inner workings of state-linked cyber operations, while new detection methods for firmware-based spyware and sector-specific responses to high-profile attacks illustrate the evolving threat landscape. These developments collectively emphasize the urgency for organizations to adopt advanced security strategies, adapt to regulatory shifts, and remain vigilant against both emerging and persistent cyber risks.
Jun 29, 2026