DJBSEC's CyberNews 2026-06-29

Today’s daily news covers the following categories: Vulnerability Threat Intelligence Policy & Legislation Nation-State/APT Data Breach

Bucket Hijacking Attack Exploits Abandoned Cloud Storage Names

Vulnerability Researchers have highlighted a growing attack technique known as bucket hijacking, where attackers take control of abandoned cloud storage buckets that are still referenced by applications or websites. Once hijacked, threat actors can serve malicious files, inject malware, or distribute phishing content through previously trusted resources. The attack exploits poor cloud asset management rather than flaws in cloud providers themselves. Security experts recommend regularly auditing cloud resources, removing stale references, and reserving deleted bucket names when possible. The technique underscores the importance of cloud hygiene in preventing software supply chain attacks. Read More

Hackers Exploit Critical PTC Windchill Vulnerability

Vulnerability Attackers are actively exploiting a critical vulnerability in PTC Windchill Product Lifecycle Management software, placing manufacturing and engineering organizations at risk. Successful exploitation can provide unauthorized access to sensitive intellectual property, engineering data, and enterprise systems. Because Windchill is widely used by large manufacturers, the flaw has significant potential impact across industrial sectors. Security researchers urge organizations to apply patches immediately and review systems for evidence of compromise. The attacks demonstrate the continued focus on enterprise software used to manage valuable business assets. Read More

Anthropic Unveils Claude Mythos 5

Threat Intelligence Anthropic has announced Claude Mythos 5, the latest generation of its cybersecurity-focused AI model. The new release improves vulnerability discovery, code analysis, and threat investigation capabilities while incorporating additional safeguards intended to reduce offensive misuse. Anthropic says the model is designed to assist defenders by accelerating software security reviews and incident response activities. Researchers expect Mythos 5 to further expand the role of AI in enterprise cybersecurity operations. The release continues the industry’s rapid movement toward AI-assisted security platforms. Read More

OpenAI Slows GPT-5.6 Rollout Due to Safety Concerns

Policy & Legislation OpenAI has announced that it is slowing the rollout of GPT-5.6 while addressing safety, stability, and operational concerns identified during deployment. The company says additional testing and validation are needed before broader availability. The decision reflects increasing emphasis on responsible AI deployment as models become more capable and widely integrated into enterprise workflows. Industry experts note that balancing innovation with security and reliability is becoming a key competitive differentiator. The delay highlights the growing importance of AI governance across the technology sector. Read More

FBI Warns Russian Intelligence Is Targeting Signal Recovery Keys

Nation-State/APT The FBI has issued a warning that Russian intelligence services are targeting Signal recovery keys to gain access to encrypted communications. Rather than breaking Signal’s encryption directly, attackers seek recovery credentials that can restore message histories on new devices. Researchers say this approach demonstrates how sophisticated threat actors often attack account recovery mechanisms instead of encryption itself. Organizations using secure messaging platforms are encouraged to strengthen account protection and safeguard recovery credentials. The alert reinforces that operational security remains just as important as encryption technology. Read More

Cisco Unified Communications Manager Flaw Under Active Exploitation

Vulnerability A critical vulnerability tracked as CVE-2026-20230 affecting Cisco Unified Communications Manager is being actively exploited in the wild. Successful exploitation could allow attackers to compromise voice infrastructure and potentially gain deeper access into enterprise environments. Voice management platforms remain attractive targets because they often integrate with identity systems and internal networks. Cisco has released updates and strongly recommends customers patch affected systems immediately. Organizations should also review logs for suspicious administrative activity and indicators of compromise. Read More

KDDI Data Breach Affects Up to 14.2 Million Email Accounts

Data Breach Japanese telecommunications provider KDDI has disclosed a data breach affecting as many as 14.2 million email accounts across six internet service providers. The incident exposed customer account information, raising concerns about phishing, account compromise, and identity theft. Investigators are working to determine the full scope of the breach while notifying affected customers. Large telecommunications providers continue to be prime targets because they maintain extensive customer identity and communication data. Users are advised to change passwords, enable multi-factor authentication, and remain alert for suspicious emails. Read More

Anonymous-Linked Hacktivist Claims GOP Cyberattack

Threat Intelligence Hacktivist Aubrey Cottle, who has been associated with the Anonymous collective, has publicly claimed responsibility for a cyberattack targeting Republican Party infrastructure. Reports indicate the operation was politically motivated rather than financially driven, continuing the trend of hacktivist activity surrounding major political events. Analysts note that hacktivist campaigns often focus on website disruptions, data exposure, or public messaging rather than long-term persistence. While the full impact of the incident remains under investigation, the event highlights the continued role of politically motivated cyber operations. Security experts expect hacktivist activity to remain elevated during periods of heightened political tension. Read More