Russian authorities used Cellebrite mobile hacking technology to unlock a jailed activist's iPhone, even though this occurred months after the Israeli company had publicly stopped sales to Russia. The case raises serious questions about how Russian law enforcement continued to access Cellebrite tools despite the company's stated policy against selling to authoritarian regimes, suggesting either stockpiled equipment or unauthorized third-party channels may be in use.

Microsoft is warning about an active phishing campaign targeting hotels that uses fake photo attachments in ZIP files to deliver a Node.js-based malware implant. The attackers are specifically going after hospitality businesses, likely aiming to compromise guest data or payment systems. Security researchers are urging hotels to be cautious of unsolicited emails containing photo attachments, as opening these files can install persistent backdoor access on their networks.

Security researchers have discovered Miasma, a new malware campaign targeting software developers through compromised npm packages and GitHub Actions workflows. The attack represents a sophisticated supply chain threat that exploits the developer tools and automation pipelines that programmers rely on daily. This latest campaign highlights the growing risk to software supply chains as attackers increasingly focus on compromising development infrastructure to reach downstream users.

Guardian Agents represent an emerging approach to identity governance that adds an additional layer of security beyond traditional identity and access management systems. These AI-powered agents act as intelligent intermediaries that continuously monitor and validate user access decisions in real-time, helping organizations prevent unauthorized access and detect suspicious behavior patterns. The technology aims to address the growing complexity of managing identities across cloud environments and hybrid workforces.

A newly discovered Linux kernel vulnerability dubbed DirtyClone allows local users to escalate privileges and gain root access through exploiting the way the kernel handles cloned packets. The flaw presents a significant security risk for Linux systems, as attackers with local access could leverage it to take complete control of affected machines. Organizations running vulnerable Linux kernel versions should apply security patches as soon as they become available to mitigate the threat.

CISA has added an exploited remote code execution vulnerability in PTC Windchill to its Known Exploited Vulnerabilities catalog, as web shell attacks leveraging this flaw continue to be observed in the wild. Organizations using PTC Windchill are urged to apply available patches immediately to prevent attackers from gaining remote access through this security weakness.

A new Linux vulnerability called the pedit COW exploit has been discovered that allows attackers to gain root access to systems by poisoning cached binaries. The exploit takes advantage of a flaw in how Linux handles copy-on-write operations, potentially compromising system security. This represents a significant security concern for Linux systems, as root access enables complete control over affected machines.

Dark Reading's submissions editor is asking contributors for patience as the publication works through an overflowing inbox of article submissions. The team specifically requests that contributors stop sending AI-generated content and product promotions, both of which are slowing down their review process significantly. Instead, they're looking for original, human-written opinions and technical expertise from cybersecurity practitioners, ideally around 750 words, that offer fresh perspectives without pushing specific business interests.

President Trump signed two executive orders on June 22nd that set an aggressive 2030 deadline for federal agencies and contractors to transition to post-quantum cryptography, a timeline that significantly accelerates previous industry expectations of 2035. The mandate requires agencies to appoint quantum migration leads within 30 days and establish new cryptographic systems to protect against future quantum computer attacks that could break today's encryption. Security experts warn the transition will be extraordinarily complex and expensive, with federal costs alone estimated at over seven billion dollars, as organizations must inventory and upgrade cryptography embedded across vast IT and operational technology systems, from applications and networks to connected devices and third-party systems.

Google has released Chrome 149, patching 18 security vulnerabilities including four critical and 14 high-severity flaws. More than half of these are use-after-free bugs, which are memory corruption issues that could potentially allow remote code execution or help attackers escape Chrome's security sandbox. The update is rolling out now for Windows, Mac, and Linux users, and Google says there's no evidence these vulnerabilities have been exploited in the wild.