2026-06-08: SolarWinds Serv-U exploit is live in the wild with CISA adding CVE-2026-28318 to the KEV catalog

Show Notes - 2026-06-08

Stories Covered

• Date:
• Today:
• SolarWinds Serv-U Vulnerability Exploited in the Wild (CVE-2026-28318) [Critical Alerts]
• UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign [Critical Alerts]
• Meta Says 20,000 Instagram Accounts Hacked via AI Tool Abuse [Business & Infrastructure Threats]
• UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency [Business & Infrastructure Threats]
• C0XMO Botnet Spreads via DD-WRT Router Flaw, Kills Rival Malware [Business & Infrastructure Threats]
• RubyGems Adds Dependency Cooldowns to Counter Supply Chain Attacks [General Security News]
• VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks [General Security News]
• OpenAI Rolling Out ChatGPT Account Security Controls [General Security News]

CVEs Referenced

CVE-2021-27137, CVE-2026-28318

Indicators of Compromise

Domains: privnote[.]com, -itdesk[.]com, -it[.]com, -helpdesk[.]com.

Read the full brief