• Microsoft has triggered widespread browser security warnings after allowing the TLS certificate for a critical Microsoft 365 connectivity testing domain to expire, raising concerns over certificate lifecycle management practices. The affected domain, connectivity.office.com, widely used by system administrators and enterprise IT teams to validate network access to Microsoft 365 services, began returning NET::ERR_CERT_DATE_INVALID errors in […]

    The post Microsoft Website Displays Security Warning After Certificate Expiry appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Microsoft 365 Copilot has been found vulnerable to a critical one-click data exfiltration attack chain dubbed “SearchLeak,” exposing sensitive enterprise data through a combination of AI-specific and traditional web vulnerabilities. Discovered by Varonis Threat Labs, the flaw, tracked as CVE-2026-42824 and rated critical, demonstrates how modern AI integrations can unintentionally expand attack surfaces by linking […]

    The post Microsoft 365 Copilot Vulnerability Exposes Sensitive Data Through One-Click Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The Trump administration’s use of military lawyers for civilian roles would be probed by Congress’ watchdog agency under language added to the 2027 defense policy bill.

    The provision was added to the Senate Armed Service Committee’s version of the 2027 National Defense Authorization Act by Sen. Elizabeth Warren, D-Mass. It orders the Government Accountability Office to review the Pentagon’s use of judge advocate generals to support the Justice Department’s operations, “including their use as immigration judges and special prosecutors, and its impact on morale and readiness,” Warren’s office said. 

    “Pete Hegseth is treating our independent military lawyers like pawns in Trump’s cruel immigration agenda and it’s hurting our military readiness and morale,” Warren said in an emailed statement to Defense One. “This independent investigation is an important step to support our service members and hold this administration accountable.” 

    Warren’s office said the amendment ordering up the probe had "bipartisan support” and would not be cut during debate in the Senate or in conference with the House. Her statement did not say how the SASC voted on her provision, and committee spokespeople did not return a request for comment. 

    Earlier this month, Republicans axed a House effort to amend U.S. law to limit JAGs to military-related matters. 

    The Congressional interest in the morale of judge advocate generals follows Defense Secretary Pete Hegseth’s high-level firings, harsh criticisms, and wide-ranging reforms targeted at the military’s lawyers. During his 18 months in office, Hegseth has fired the military’s top uniformed lawyers, reduced the civilian legal staff, and overseen the assignment of JAGs to civilian work, including as immigration judges and as special U.S. attorneys in Democratic-run cities during National Guard deployments. 

    Warren’s provision drew praise from Steve Lepper, a former Air Force JAG and a member of a group of former JAGs who have criticized the administration’s use of military lawyers. 

    “I agree with Senator Warren. I agree with the rationale, and, quite frankly, anything that gets into the NDAA that requires the Pentagon to justify his use of judge advocates in those roles, I think, is a good thing,” Lepper said. 

    Last year, about 600 JAGs were assigned to work for the Justice Department as immigration judges. Earlier this year, Defense One reported that dozens of uniformed lawyers were sent to cities to work as special U.S. attorneys as part of National Guard surges in Minneapolis, Minnesota; Memphis, Tennessee; and Washington, D.C.

    Military legal experts have told Defense One that those JAGs often lack the necessary experience to work those cases. In December, one Army lawyer working as a special U.S. attorney in Minnesota was reportedly held in contempt of court when an Immigrations and Custom Enforcement detainee was released from custody without his identification paperwork.

    Lepper said he believes the move to push JAGs into those civilian roles has harmed the morale of the military’s lawyers. 

    “The rank-and-file judge advocates don't think this is a good idea,” he said. “Americans are on the receiving end of the cases that are being prosecuted by judge advocates and immigrants are being subjected to, I believe, the lack of due process by having military officers serving as immigration judges sitting in judgment on their immigration cases.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole login credentials. The exfiltration was the unusual part: the attackers rewired the victims’ own Google Workspace rules to copy any message

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi). According to a report published by Proofpoint, the threat actor has been found orchestrating phishing campaigns using developer role recruitment or code review themes

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface. A server takeover exposes every provider key it holds, the secrets that

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path they call SearchLeak. Because the link pointed to a real microsoft.com domain, traditional anti-phishing and URL filtering tools were

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Stuff broke again. Not in a movie way. An old tool was left exposed. An abandoned package was abused. A deprecated feature was still running in prod. This week is the same lesson in a new form: phishing kits are easier to rent, AI names are useful bait, old login paths still fail, and forgotten software keeps becoming someone else’s entry point. Scroll through the full Monday Cybersecurity

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Both CFAKE and SOCFAKE (CFAKE.com and SOCFAKE.com) were seized after prosecutors said they hosted nonconsensual nude digital forgeries of famous women.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • This week in cybersecurity from the editors at Cybercrime Magazine

    Sausalito, Calif. – Jun. 15, 2026

    Read the full story from CMBlog

    By harnessing AI, cybercriminals are developing increasingly sophisticated techniques to commit their crimes, posing a growing threat to businesses, institutions, and individuals worldwide.

    The threat hit close to home earlier this year when the hacking group ShinyHunters executed a major multi-wave breach on Instructure’s Canvas Learning Management System, compromising data of up to 275 million users across nearly 9,000 institutions worldwide, including DeVry University. The attack is a reminder of just how fast the threat landscape is evolving.

    AI is accelerating that evolution. Cybersecurity Ventures predicts that ransomware attacks will occur every two seconds by 2031.

    To fight the ongoing war against cybercrime, many more highly skilled cybersecurity experts are needed throughout the business sector, government agencies, in healthcare and educational institutions. Although approximately 1.34 million cybersecurity professionals are currently working in the U.S., the demand is very high — with over 514,000 job openings nationally in the field, according to CyberSeek.

    Despite this rising demand for cybersecurity professionals, early-career talent is often shut out due to their lack of experience, making the shortage worse.

    “The cyber workforce gap is real, and AI is changing what entry-level jobs look like,” said Dr. Jingdi “Rebecca” Zeng, senior professor and curriculum chair, DeVry University. “That means part of learning that used to happen on the job now needs to happen earlier, in the classroom.”

    To prepare the next generation of cyber leaders, DeVry University’s Cybersecurity Center of Excellence is tackling the challenge head-on. By partnering with industry leaders, the university has designed a curriculum that aims to help close the skills gap by equipping early-career professionals with the knowledge and experiences they need to thrive in today’s rapidly evolving cyber landscape.

    Read the Full Story



    Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

    • SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
    • NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
    • HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
    • VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
    • M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
    • BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
    • PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
    • PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
    • RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

    Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

    The post Cybercrime is Accelerating: Preparing the Next Wave of Cybersecurity Experts appeared first on Cybercrime Magazine.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶