📰 Cybersecurity Daily Brief

Friday, 26 June 2026 at 06:00 — 8 sources reporting

🐾 GUARDED BY BULLY — DIGITAL THREAT RESPONSE UNIT

BleepingComputer

• Anthropic is testing desktop-like Claude Cowork for mobile
• Poland busts SIM-swapping gang tied to millions in crypto theft
• Order-tracking app Shop abused to push callback phishing attacks

Graham Cluley

• Smashing Security podcast #473: How a hacker could have Rickrolled the entire World Cup
• Hacker hijacks Brazil’s national alert system, sending “misanthropy” to millions of phones
• Apple’s Hide My Email tweak leaves privacy fans fuming

Krebs on Security

• Scattered Spider Hackers Plead Guilty on Day 1 of Trial
• ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
• Who Runs the Ransomware Group ‘The Gentlemen?’

PortSwigger Research

• Top 10 web hacking techniques of 2025
• Top 10 web hacking techniques of 2025: call for nominations
• The Fragile Lock: Novel Bypasses For SAML Authentication

Schneier on Security

• AI and Liability
• Interesting Paper Exploring Prompt Injection
• Embedding Forbidden Text in Spyware to Discourage AI Analysis

The Hacker News

• Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
• ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
• Surviving the Mythos Era: Richard Bejtlich on the Case for NDR

ThreatPost

• Student Loan Breach Exposes 2.5M Records
• Watering Hole Attacks Push ScanBox Keylogger
• Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Troy Hunt

• Weekly Update 509
• Weekly Update 508
• Weekly Update 507

---

Generated by CyberAware UK — 26 June 2026