2026-06-11: A new Windows zero-day exploit bypassing Microsoft Defender was released hours after Patch Tuesday

Show Notes - 2026-06-11

Stories Covered

• Today:
• New Windows Zero-Day Exploit 'RoguePlanet' Released [Critical Alerts]
• 'GreatXML' Zero-Day Exploit Bypasses BitLocker [Critical Alerts]
• Microsoft Patches Exchange Server Zero-Day Exploited in Attacks (CVE-2026-42897) [Critical Alerts]
• CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog [Critical Alerts]
• Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks (CVE-2026-5027) [Critical Alerts]
• Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs [Vulnerability Disclosures]
• Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities [Vulnerability Disclosures]
• Who Runs the Ransomware Group 'The Gentlemen?' [Ransomware & Extortion]
• WA: Chelan County Enters Third Week of Disruptions with No Recovery Timeline [Ransomware & Extortion]
• Infostealers Turn Millions of Devices Into Credential Theft Machines [Business & Infrastructure Threats]
• Deceptive Installers: How Fake Apps Target macOS [Business & Infrastructure Threats]
• GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks [General Security News]
• Microsoft Fixes BitLocker Recovery Bug on Windows Server 2025 [General Security News]
• Microsoft: Some Windows PCs Fail to Install Latest Monthly Updates [General Security News]

CVEs Referenced

CVE-2026-10520, CVE-2026-10523, CVE-2026-11645, CVE-2026-20245, CVE-2026-22732, CVE-2026-25089, CVE-2026-27671, CVE-2026-33017, CVE-2026-40128, CVE-2026-42897, CVE-2026-44748, CVE-2026-44815, CVE-2026-45586, CVE-2026-45657, CVE-2026-47291, CVE-2026-49160, CVE-2026-5027, CVE-2026-50507, CVE-2026-7473

Read the full brief