The notorious hacking group ShinyHunters claims it has stolen nearly 300 gigabytes of data from the Council of Europe, threatening to release the information publicly if the organization doesn't begin negotiations by June 16th. The alleged breach includes sensitive data on over 10,000 employees spanning from 2011 to 2026, including payroll information, social security numbers, medical records, and more than 14,000 CVs across multiple departments. This attack is part of a broader ShinyHunters campaign in 2025 that has targeted numerous high-profile organizations, including a recent operation that exploited a zero-day vulnerability in Oracle PeopleSoft affecting roughly 100 companies.

France's official government messaging platform Tchap was breached on June 7th, exposing personal details of over 70,000 government employees out of 825,000 registered users. A previously unknown hacker calling themselves "Misere" claimed responsibility and allegedly stole 13.5 gigabytes of data including names, email addresses, government departments, and over 640,000 plaintext messages. Security experts believe this may not be a state-sponsored attack, but the exposed information could enable future targeted phishing campaigns against French government ministries.

Novo Nordisk, the Danish pharmaceutical giant behind popular drugs like Ozempic and Wegovy, has disclosed a cybersecurity breach involving unauthorized access to some of its internal IT systems. The company says limited patient data from clinical trials was exposed, including randomly assigned patient IDs, birth years, and health data, though not information that directly identifies participants by name. Healthcare provider information including names, registration numbers, and contact details was also potentially compromised, and no cybercrime group has yet claimed responsibility for the attack.

A 44-year-old Ukrainian national has pleaded guilty in US court to his role in the notorious Conti ransomware group, which targeted over 1,000 organizations between 2020 and 2022. Oleksii Lytvynenko admitted to developing malware for the operation starting in September 2021 and possessing data from 12 victims including eight in the US, and he now faces up to 20 years in prison. The Conti ransomware gang is estimated to have collected at least 150 million dollars in ransom payments before shutting down in May 2022 after pledging support for the Russian government.

Israeli cybersecurity startup NewCore has launched from stealth mode with 66 million dollars in seed funding to tackle identity security in the age of AI agents. The Tel Aviv-based company, founded by Israeli intelligence veterans, has built a security platform designed to protect human, machine, and AI agent identities across organizations, using technology that claims to eliminate entire categories of attacks on authentication systems. The platform features specialized governance for AI agents like Claude Code and Cursor, and can be deployed in hours with zero downtime, addressing what the company calls the broken state of enterprise identity management.

Multiple WordPress plugin scripts have been compromised with hidden backdoors, allowing attackers to gain unauthorized access to websites. The tampered plugins pose a significant security risk to site owners who may unknowingly install or update these compromised versions. WordPress site administrators are urged to verify their plugin sources and check for any unauthorized modifications to prevent potential breaches.

Many organizations make a critical security mistake during employee onboarding by requiring new hires to set passwords immediately, often before security training or before accounts are fully configured with proper protections. This practice creates an unnecessary vulnerability window where weak passwords or poor security habits can take root from day one. The better approach is to delay password creation until after employees receive security training and IT teams have properly configured all access controls and monitoring tools.

Security researchers have uncovered a massive browser extension scheme involving 152 Chrome wallpaper extensions with over 105,000 combined installations that were secretly distributing adware and generating fake web traffic. These malicious extensions posed as legitimate wallpaper customization tools while running unauthorized background activities. The discovery highlights the ongoing risk of compromised browser extensions and the importance of vetting even seemingly harmless productivity tools before installation.

The US government has ordered Anthropic to suspend foreign national access to its latest AI models, Fable 5 and Mythos 5, citing national security concerns after research showed adversaries are increasingly using AI to create malicious code, find vulnerabilities, and automate cyberattacks. The move comes as multiple AI companies report evidence of nation-state actors and cybercriminals using advanced AI models throughout the entire attack lifecycle, with some models now capable of conducting end-to-end attack chains that approach the skill level of expert human hackers. The development highlights growing concerns about AI-powered threats, as attackers use sophisticated "scaffolding" around these models to orchestrate autonomous attacks rather than simply build malicious tools.

Splunk Enterprise has disclosed a critical security vulnerability that allows attackers to execute code remotely without requiring authentication credentials. The flaw poses a serious risk to organizations using the platform, as it could enable unauthorized access and complete system compromise. Splunk users are urged to patch their systems immediately to protect against potential exploitation.