DJBSEC's CyberNews 2026-06-12

Today’s daily news covers the following categories: Vulnerability Threat Intelligence Malware Ransomware Data Breach

ServiceNow Fixes API Issue Following Suspicious Tenant Activity

Vulnerability ServiceNow has addressed an API-related issue after reports surfaced of suspicious activity affecting certain customer tenants. The company says it investigated unusual behavior and implemented fixes designed to prevent unauthorized access or misuse of tenant environments. While no widespread compromise has been confirmed, the incident raised concerns about multi-tenant cloud platform security. Researchers note that APIs remain a frequent target because they often provide direct access to sensitive business data and workflows. Organizations using ServiceNow are encouraged to review logs and validate security configurations as a precaution. Read More

Claude Mythos Accelerates Exploit Development for Known Vulnerabilities

Threat Intelligence Researchers report that Anthropic’s Claude Mythos platform is demonstrating an ability to dramatically reduce the time required to develop exploits for known vulnerabilities, turning “N-days into N-hours.” The findings suggest AI can significantly accelerate vulnerability analysis, proof-of-concept creation, and exploit research. Security experts view this as both a defensive opportunity and a potential offensive concern, depending on how the technology is used. The development highlights the growing impact of AI on the vulnerability lifecycle. Organizations may need to shorten patching timelines as AI reduces the gap between disclosure and exploitation. Read More

GitHub Automates Disabling of Risky NPM Script Installs

Malware GitHub has introduced automated protections designed to disable potentially dangerous NPM installation scripts that are commonly abused in software supply chain attacks. The change aims to reduce the risk of malicious packages executing harmful code during installation. Researchers say attackers increasingly rely on install-time scripts to deploy malware, steal credentials, or compromise developer environments. By limiting automatic execution of risky scripts, GitHub hopes to strengthen security across the JavaScript ecosystem. The move represents another step toward improving open-source software supply chain defenses. Read More

Researchers Demonstrate AI-Based Attack Against Google Infrastructure

Threat Intelligence Security researchers have demonstrated how AI-assisted techniques could be used to identify weaknesses and potentially compromise portions of Google-related infrastructure under controlled conditions. The work highlights how advanced AI systems can accelerate reconnaissance, vulnerability analysis, and attack planning. Researchers stress that the exercise was intended to evaluate defensive readiness rather than facilitate real-world attacks. The findings reinforce concerns that AI will increasingly be used by both defenders and adversaries. Experts say organizations should prepare for a future where AI significantly accelerates cyber operations on both sides. Read More

The Gentlemen Ransomware Group Claims Hundreds of Victims

Ransomware The Gentlemen ransomware operation has claimed responsibility for attacks against 478 organizations, making it one of the more active ransomware groups currently operating. Researchers say the group combines data theft, extortion, and encryption tactics to maximize pressure on victims. The scale of the claims demonstrates how ransomware remains one of the most profitable and disruptive forms of cybercrime. Analysts are monitoring the group’s infrastructure, victim disclosures, and evolving tactics. Organizations are advised to maintain strong backup strategies and incident response plans to reduce ransomware risk. Read More

Nightmare Eclipse Claims BitLocker Bypass Technique

Vulnerability A security researcher operating under the name Nightmare Eclipse has publicly disclosed what is claimed to be a method for bypassing Microsoft BitLocker protections under specific circumstances. The technique reportedly targets weaknesses in how encryption protections interact with system configurations and recovery mechanisms. Microsoft and independent researchers are reviewing the claims to determine the practical impact and applicability of the technique. If validated, the findings could have implications for organizations relying heavily on BitLocker for device security. The disclosure highlights the ongoing scrutiny of endpoint encryption technologies. Read More

New Attacks Manipulate OpenClaw AI Agents

Vulnerability Researchers have identified attacks capable of manipulating OpenClaw AI agents into performing unintended actions through carefully crafted inputs and instructions. The attacks exploit weaknesses in how autonomous AI systems process and trust information from external sources. Security experts warn that AI agents with access to tools, files, or external services may be particularly vulnerable to these techniques. The findings underscore the importance of secure AI agent design, input validation, and permission controls. As AI agents become more widely adopted, defending against prompt and workflow manipulation will become increasingly important. Read More

Max-Severity Ivanti Sentry Flaw Exploited Within 24 Hours

Vulnerability A critical vulnerability affecting Ivanti Sentry was reportedly exploited within 24 hours of public disclosure, demonstrating the speed at which attackers weaponize new flaws. The vulnerability received the maximum severity rating and can potentially provide attackers with significant access to affected environments. Researchers warn that organizations often struggle to patch systems quickly enough to keep pace with modern exploitation timelines. The incident highlights the growing challenge posed by shrinking vulnerability remediation windows. Security teams are being urged to prioritize rapid patch deployment for internet-facing systems. Read More

ShinyHunters Linked to University of Nottingham Student Data Leak

Data Breach The ShinyHunters cybercriminal group has been linked to the exposure of student data belonging to the University of Nottingham. Reports indicate that personal information associated with students may have been leaked or offered for distribution following the breach. Educational institutions continue to be attractive targets due to the large volume of personal and research-related data they maintain. The incident raises concerns about identity theft, fraud, and long-term privacy risks for affected individuals. University officials and investigators are continuing to assess the scope and impact of the exposure. Read More