CRITICALApt
Global

Breach Roundup: Microsoft Tries to Mend Researcher Bridges

·Source: Bank Info Security

Updated:

Executive Summary

Also: Gas Station Monitoring Systems Under Attack, Spanish Teen Doxer Arrested This week, more happened than fits here: Microsoft tried to make nice with researchers, gas tank gauges under attack in the United States

Analysis

Also: Gas Station Monitoring Systems Under Attack, Spanish Teen Doxer Arrested This week, more happened than fits here: Microsoft tried to make nice with researchers, gas tank gauges under attack in the United States, fake FIFA websites are everywhere. Russia cried cyberespionage, Spanish police arrested a teenaged doxer, a Oracle Weblogic flaw was actively exploited.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/breach-roundup-microsoft-tried-to-mend-researcher-bridges-image_small-6-a-31887.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jun 5, 2026.

Related Threats

MEDIUMApt

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO [small office and home office] and IoT devices and operates as a centrally controlled, high-performance scanner used to discover, fingerprint, and continuously map exposed services at scale," Lumen's

The Hacker News
MEDIUMApt

UK weakens proposed telecoms defenses against Chinese hackers after industry pushback

Britain has weakened proposed cybersecurity protections for its telecoms networks that were developed in response to the Salt Typhoon espionage campaign, after the companies responsible for implementing the measures lobbied against them.

The Record
MEDIUMApt

Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs

Two separate campaigns target CVE-2025-8088, fixed last July, to conduct data theft and cyberespionage against military and government targets in Ukraine.

CVE-2025-8088
Dark Reading