2026-06-12: CISA gives federal agencies until Sunday to patch an Ivanti Sentry vulnerability already exploited

Show Notes - 2026-06-12

Stories Covered

• June 12, 2026
• Today:
• CISA Orders Ivanti Sentry Patching by June 14 (CVE-2026-10520) [Critical Alerts]
• ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) [Critical Alerts]
• The Gentlemen Ransomware Claims 478 Victims Since March 2025 [Ransomware & Extortion]
• Europol Dismantles AudiA6 Crypto Laundering Service [Ransomware & Extortion]
• AI-Driven Threats Exposing Limits of MSP Security Stacks [Business & Infrastructure Threats]
• Hackers Exploit Langflow Vulnerability for Remote Code Execution (CVE-2026-5027) [Business & Infrastructure Threats]
• LangGraph Flaw Chain Exposes Self-Hosted AI Agents to RCE [Business & Infrastructure Threats]
• AI Agent Supply Chains Lack Integrity Verification [Business & Infrastructure Threats]
• OpenClaw AI Agent Vulnerable to Hidden Command Injection and Phishing [Business & Infrastructure Threats]
• French Government Tchap Messenger Breach Affects 73,000 Employees [Business & Infrastructure Threats]
• GreatXML Exploit Bypasses BitLocker via Recovery Partition XML Files (CVE-2026-45585) [Windows / AD Security]
• CISA Issues New Binding Operational Directive 26-04 [General Security News]
• Alert Fatigue Becoming a Security Threat of Its Own [General Security News]
• OceanLotus Shifts Focus to Domestic Espionage in Vietnam [General Security News]
• North Korean Famous Chollima Accounts for 47% of Tech Sector Intrusions [General Security News]
• IoT Platform Vulnerabilities Across Multiple Vendors [Vulnerability Disclosures]
• Siemens Desigo CC Patch Files Flagged as Malware by Security Engines [Vulnerability Disclosures]

CVEs Referenced

CVE-2025-67644, CVE-2026-10520, CVE-2026-10557, CVE-2026-27022, CVE-2026-28277, CVE-2026-28742, CVE-2026-35273, CVE-2026-42947, CVE-2026-45585, CVE-2026-50005, CVE-2026-50101, CVE-2026-50108, CVE-2026-50245, CVE-2026-5027, CVE-2026-7368

Indicators of Compromise

IP Addresses: 176.120.22.24, 3.2.3.5

Read the full brief