MEDIUMZero Day
Global

Ex-CISA CIO Breaks Down Trump's New AI Executive Order

·Source: Bank Info Security

Updated:

Executive Summary

Bob Costello on Voluntary Plan's Impact on Collaboration - and CISA's Pivotal Role Former CISA CIO Bob Costello said President Trump's voluntary AI cybersecurity review order provides a workable foundation for government

Analysis

Bob Costello on Voluntary Plan's Impact on Collaboration - and CISA's Pivotal Role Former CISA CIO Bob Costello said President Trump's voluntary AI cybersecurity review order provides a workable foundation for government-industry collaboration, though agencies will need time and resources to meet accelerated 30-day evaluations of advanced AI systems.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ex-cisa-cio-breaks-down-trumps-new-ai-executive-order-image_small-4-a-31897.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jun 5, 2026.

Related Threats

CRITICALZero Day

Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree

A newly disclosed Oracle PeopleSoft zero-day became the weapon of choice in a recent ShinyHunters extortion campaign that primarily targeted universities and other educational institutes. Attackers exploited the critical remote code execution (RCE) flaw in PeopleSoft’s Environment Management component that Oracle started warning customers about on June 10, 2026. In an advisory , the company urged

CVE-2026-35273
CSO Online
CRITICALZero Day

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. The post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek .

CVE-2026-35273
SecurityWeek
CRITICALZero Day

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest. Google's Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish its advisory until June 10, so the bug was a

CVE-2026-35273
The Hacker News