VulnHub

Real-time Cybersecurity News

Security Affairs newsletter Round 582 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs
Actively Exploited
Malware

Overview

The latest edition of the Security Affairs newsletter discusses several cybersecurity topics, including a new malware called GentleKiller, which is designed to evade endpoint detection and response (EDR) systems. This malware is linked to a global credential-spraying operation that targets numerous organizations, exposing their login credentials. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about active exploitation of various vulnerabilities, urging companies to take immediate action to protect their systems. The newsletter serves as a reminder of the ongoing threats in the cybersecurity landscape and the need for organizations to remain vigilant against evolving attack methods.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: GentleKiller malware, EDR systems, various organizations
  • Action Required: CISA recommends immediate action to patch vulnerabilities and strengthen security measures.
  • Timeline: Newly disclosed

Original Article Summary

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Inside GentleKiller: The EDR-Killer Powering The Gentlemen FortiBleed Exposes Global Credential-Spraying Operation CISA Warns of Active […]

Impact

GentleKiller malware, EDR systems, various organizations

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

CISA recommends immediate action to patch vulnerabilities and strengthen security measures.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Malware.

Read Original Article

Related Coverage

A Glimpse into the “Search Your Target” Market for Stolen Credentials

BleepingComputer

A new underground market has emerged where attackers can easily search through stolen credential databases to find specific accounts or companies without having to sift through vast amounts of data themselves. This service allows cybercriminals to efficiently target their attacks on particular organizations or individuals by paying others to conduct the searches for them. The growing trend raises concerns for businesses, as it makes it easier for attackers to exploit compromised credentials. As these services become more accessible, companies need to enhance their security measures to protect against targeted attacks. This shift in tactics emphasizes the ongoing threat posed by credential theft and the importance of proactive security strategies.

Jun 22, 2026

Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data

SecurityWeek

A vulnerability in certain versions of the Gravity SMTP plugin for WordPress has been exploited by attackers to extract sensitive information. This flaw allows the leakage of API keys, tokens, server details, and other confidential data. Websites using outdated or unpatched versions of the plugin are particularly at risk. This incident is concerning because it can lead to unauthorized access and further exploitation of affected sites. Users and website administrators are urged to update their plugins to protect against these data leaks and ensure the security of their WordPress installations.

Jun 22, 2026

Microsoft Attributes Mastra AI Supply Chain Attack to North Korea

Infosecurity Magazine

Microsoft security researchers have identified a supply chain attack linked to the North Korean group known as Sapphire Sleet, targeting the company Mastra. This attack highlights the ongoing threat posed by state-sponsored actors, particularly in the realm of supply chain vulnerabilities, which can impact multiple organizations through a single breach. The specifics of how the attack was carried out and the exact implications for Mastra and its customers have not been detailed yet. However, supply chain attacks can lead to significant data breaches and operational disruptions, making this incident concerning for businesses that rely on Mastra's services. Companies in the tech sector should remain vigilant against potential threats from state-sponsored groups like Sapphire Sleet, as the risk of similar attacks continues to grow.

Jun 22, 2026

What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks

SecurityWeek

The ShinyHunters group has been at the forefront of several high-profile data breaches, demonstrating that attackers can achieve significant damage without relying on malware or zero-day exploits. Instead, they often utilize stolen credentials and other readily available information to access sensitive data. This method has led to the exposure of user information from various services, impacting numerous companies and their customers. The implications of these breaches are severe, as they compromise personal data and can lead to identity theft, financial loss, and a loss of trust in the affected services. Organizations need to strengthen their security measures, including enforcing stronger password policies and implementing multi-factor authentication to mitigate such risks.

Jun 22, 2026

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones

SecurityWeek

A new exploit called Usbliter8 has been discovered that bypasses Apple’s boot defenses, affecting millions of iPhones. This vulnerability cannot be patched, and researchers have released a proof-of-concept exploit, raising concerns about the potential for misuse. Users of affected iPhone models should be particularly vigilant, as this exploit could allow attackers to gain unauthorized access to devices. The widespread nature of this issue makes it critical for Apple to address, as it could lead to increased risks for personal data and security. As of now, there are no known patches or updates to mitigate this vulnerability, leaving many devices exposed.

Jun 22, 2026

Fortinet Responds to FortiBleed Campaign

SecurityWeek

Fortinet has acknowledged a serious credential-harvesting campaign known as FortiBleed, which has resulted in the collection of over 86,000 confirmed working credentials. This campaign poses a significant risk to users and organizations that utilize Fortinet's products, as attackers can exploit these credentials for unauthorized access to sensitive systems. The incident is particularly alarming because it affects a wide range of users, potentially including businesses that rely on Fortinet's security solutions. Companies should take immediate steps to secure their systems and monitor for any suspicious activities, as the implications of this data breach could lead to further attacks or data leaks. This situation underscores the ongoing challenges in cybersecurity and the need for constant vigilance.

Jun 22, 2026