RoguePlanet Zero-Day, Ransomware Surge, and AI-Driven Attacks Dominate Cybersecurity News
Summary
Today's cybersecurity landscape is marked by critical updates and emerging threats. Microsoft has issued an out-of-band patch for the 'RoguePlanet' zero-day vulnerability (CVE-2026-50656) in Microsoft Defender, addressing a local privilege escalation flaw. Meanwhile, ransomware attacks in Europe have surged by 55% year-over-year, with manufacturing emerging as a prime target, according to a ZeroFox report. The Qilin group remains the most active threat actor.
Experts are warning that AI is accelerating ransomware attacks, with a recent incident demonstrating how a single attacker used AI tools to compress attack timelines from days to minutes. In the US, concerns are rising that weakening CISA could undermine national cyber resilience due to changes in threat intelligence sharing protocols.
New incidents include a breach at Accenture, where hacker '888' claims to have stolen source code and cloud keys, though the company downplays the claims. A zero-day exploit in a third-party email system has impacted 12 million KDDI ISP customers, compromising email addresses and passwords. Mount Royal University has confirmed a ransomware attack by the 'CMD Organization,' which claims to have stolen 10TB of data and is demanding a $1.9 million ransom.
Further emerging threats include the 'GodDamn' ransomware, which uses a Microsoft-signed driver to evade EDR solutions. Fidelity Investments is nearing a $2.5 million settlement for a 2024 data breach affecting 77,000 people. Puerto Rico's Municipal Revenue Collection Center (CRIM) is denying a data leak after inadvertently exposing the Social Security numbers of approximately 1 million people. Finally, the Everest ransomware group is employing Wake-on-LAN to awaken sleeping PCs and maximize its attack surface.
Today New Articles
Accenture Downplays Breach as Hacker '888' Claims Theft of Source Code and Cloud Keys
A threat actor named '888' has claimed to have stolen 35GB of highly sensitive data from consulting giant Accenture, including source code, cryptographic keys, and Azure access tokens. The hacker posted evidence on a cybercrime forum, offering the data for sal...
Zero-Day Exploit in Third-Party Email System Hits 12 Million KDDI ISP Customers
Japanese telecommunications giant KDDI has confirmed that a significant data breach impacting 12.2 million people was caused by a zero-day vulnerability in a third-party email system. The attack, which occurred in June 2026, compromised the email addresses of...
CMD Ransomware Hits Mount Royal University, Claims 10TB of Data and Demands $1.9M
Mount Royal University (MRU) in Alberta, Canada, has confirmed it was the victim of a ransomware attack that resulted in the theft of student and employee data. The attack, discovered on June 17, 2026, deleted significant file storage systems and caused widesp...
GodDamn Ransomware Deploys Microsoft-Signed 'PoisonX' Driver to Blindside EDR
A new ransomware strain named 'GodDamn' has been identified by Symantec researchers as a rebrand of the Beast and Monster ransomware families. This operation, attributed to the 'Hyadina' threat actor, employs a sophisticated and dangerous technique: using a ma...
Fidelity Nears $2.5M Settlement for 2024 Data Breach Affecting 77,000 People
Financial services giant Fidelity Investments is finalizing a $2.5 million settlement for a class-action lawsuit related to a data breach in August 2024 that impacted approximately 77,000 individuals. The lawsuit alleged that Fidelity failed to adequately secu...
Puerto Rico Agency Denies Data Leak After Exposing 1 Million Social Security Numbers
An investigation by ProPublica and Centro de Periodismo Investigativo has revealed that Puerto Rico's Municipal Revenue Collection Center (CRIM) inadvertently exposed the Social Security numbers of approximately 1 million people. The data was accessible via a...
Everest Ransomware Awakens Sleeping PCs with Wake-on-LAN to Maximize Attack Surface
The Everest ransomware group has adopted a novel and aggressive tactic to maximize its impact: using Wake-on-LAN (WoL) 'magic packets' to awaken sleeping or dormant computers on a victim's network. According to research from AttackIQ, this technique allows the...
Article Updates
Microsoft Confirms 'RoguePlanet' Zero-Day in Defender, Patch in Development
Update:Microsoft has issued an emergency, out-of-band security update to address the 'RoguePlanet' zero-day vulnerability (CVE-2026-50656) in Microsoft Defender. The patch, delivered via an update to the Microsoft Malware Protection Engine, resolves the local privile...
Ransomware Attacks in Europe Skyrocket by 55% as Supply Chains Become Prime Targets
Update:A ZeroFox Q2 2026 report updates ransomware trends, confirming manufacturing as the primary target due to high operational downtime costs. The Russian-language Qilin group maintained its position as the most active threat actor for the fourth consecutive quart...
AI Accelerating Ransomware, Outpacing Traditional Defenses, Experts Warn
Update:A recent investigation by Sygnia details a real-world incident where a single, financially motivated threat actor leveraged AI as a 'force multiplier' to conduct a high-speed cloud attack. The AI-driven tools enabled the attacker to execute hundreds of unique...
Weakening CISA Could Undermine US Cyber Resilience, FDD Executive Warns
Update:The Department of Homeland Security (DHS) has established ANCHOR-CI, replacing the dissolved CIPAC, to facilitate threat intelligence sharing with critical infrastructure partners. However, the new charter omits crucial legal liability protections that previou...