Archive | Exzec Cyber Newsletter

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.

kddi

+11

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.

hacktivist

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Also: The casino hacker who bragged to journalists mid-attack lasted one day at trial, and Apple's iPhone schematics are now leaking online.

Scattered Spider

Your Fortinet credentials are already out there. Here's who has them.

Also: free smart TV apps quietly rent your home internet to AI companies, and North Korea backdoored 144 AI developer packages in under 90 minutes.

north-korea

Section 702 just expired. Congress votes again in 4 days.

Also: a ransomware gang stopped Australia's sugar harvest without leaving a ransom note, and ShinyHunters just hit Europe's human rights watchdog.

China hid inside US military and medical networks for 26 months before anyone noticed

Also: a Roblox cheater accidentally committed the largest education breach in US history, and your AI coding agent will execute whatever attackers tell it to.

ShinyHunters found an Oracle zero-day. Still no patch.

Also: FBI + Google + Lumen dismantled a $1.9B Chinese phishing franchise, and a county commissioner told a roomful of residents they would not be speaking about Flock tonight.

Exzec Cyber | June 12, 2026

Meta built an AI to help recover locked Instagram accounts. Attackers used it to hijack 20,000. Also: ServiceNow's unauthenticated API exposed customer records, and CISA is scrapping CVSS scores.

Exzec Cyber | June 10, 2026

Chinese deepfake software lets scammers swap their face and voice on live video calls. Also: Microsoft breaks its own Patch Tuesday record, and a Cisco SD-WAN zero-day has no patch.