-Targeted supply chain attack hits DAEMON Tools
-Australia gets its own CSRB
-VOIP server hacker arrested after 17 years
-Oracle switches to monthly security updates
-Police can be tracked via BLE tasers and bodyworn cameras
-X user tricks Grok and steals $200k
-Canonical DDoS attacks are still ongoing
-Instructure confirms hack
-Chrome deploys uninstallable 4GB AI model
-Utah's dumb VPN law goes into effect

Newsletter: https://news.risky.biz/risky-bulletin-extremely-targeted-supply-chain-attack-hits-daemon-tools/
Podcast: https://risky.biz/RBNEWS560/

Critical Vulnerability in PAN-OS (CERT-EU Security Advisory 2026-006)

On 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges.
Palo Alto observed limited exploitation of this vulnerability. It is strongly recommended updating affected appliances as soon as patches will be available, and to apply workarounds and mitigation in the meantime.

https://www.cert.europa.eu/publications/security-advisories/2026-006/

ISW Special Report:

🇷🇺 🇺🇦 #Russia is engaged in a deliberate, sophisticated, and systematic campaign to repopulate occupied areas of #Ukraine with Russian citizens as part of a broader effort to consolidate control and forcibly integrate these territories into the Russian state.

https://understandingwar.org/research/russia-ukraine/russias-resettlement-strategy-in-occupied-ukraine/