Windows Secure Boot Certificate Expired — Billions of PCs Affected Including Linux Distros

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 The clock has run out. As of June 24, 2026, the first of Microsoft’s original Secure Boot certificates, the Microsoft Corporation KEK CA 2011, has officially expired, with the …

LokiBot Campaign Uses JScript Attachment, .NET Injector, and Process Injection to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 LokiBot, one of the oldest credential-stealing malware families still active today, has resurfaced in a new multi-stage campaign designed to steal credentials from a wide range of …

ManageEngine AD360 Integration Flaw Exposes User Identity and Role Information to Attackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 ManageEngine has disclosed a high-severity vulnerability, tracked as CVE-2026-11374, affecting several of its identity and access management solutions when integrated with AD360. The flaw could allow unauthenticated …

Gemini 3.5 Flash Released With Computer Use Capabilities that Build Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 Google has officially released Gemini 3.5 Flash with native “computer use” capabilities, marking a significant shift toward autonomous AI agents that can interact directly with digital environments. …

Malicious Chrome Extension Uses Native Messaging Host to Execute PowerShell Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 A newly discovered malware campaign has turned Google Chrome into a remote backdoor without breaking any of the browser’s built-in rules. Spotted in June 2026, the attack …

OpenClaw Skill Marketplace Exposes AI Agents to Supply Chain Malware and Financial Fraud

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 A wave of malicious skills targeting the OpenClaw AI agent marketplace has exposed a dangerous new frontier in software supply chain security. Attackers are using the ClawHub …

Hackers Use Cisco AnyConnect and Google Update Lures to Drop SharkLoader Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 A newly discovered malware family is making its way onto systems worldwide by hiding inside fake software installers that look completely legitimate. Researchers have identified a campaign …

Chrome 149 Security Update — Patch for Critical Flaws that Enable Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 Google has released a critical security update for its Chrome browser, pushing the Stable channel to version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. The …

Anthropic Accuses Alibaba of ‘Illicitly’ Accessing Its Claude AI Models in Largest Known Distillation Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

June 25, 2026 Anthropic has formally accused Chinese tech and e-commerce giant Alibaba of orchestrating a massive, unauthorized extraction campaign targeting its Claude AI model, marking what the company describes …