2026-06-16: Cisco patches its eighth SD-WAN zero-day of the year

Show Notes - 2026-06-16 Stories Covered: - June 16, 2026 - Today: - Cisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262) (https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html) - Google Chrome V8 Zero-Day (CVE-2026-11645) (https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html) - Oracle PeopleSoft Zero-Day Exploited by ShinyHunters (CVE-2026-35273) (https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html) - LiteSpeed cPanel Plugin Privilege Escalation (CVE-2026-54420) (https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html) - Mackay Sugar Ransomware Attack Shuts Down Mills (https://www.securityweek.com/ransomware-attack-shuts-down-mills-of-australias-second-largest-sugar-producer/) - FulcrumSec Leaks Novo Nordisk Data After $25M Demand Goes Unpaid (https://databreaches.net/2026/06/15/scoop-fulcrumsec-leaks-novo-nordisk-data-after-25m-demand-goes-unpaid/) - Conti Ransomware Developer Pleads Guilty (https://www.securityweek.com/ukrainian-man-pleads-guilty-in-us-to-conti-ransomware-charges/) - Microsoft 365 Copilot SearchLeak Vulnerability (CVE-2026-42824) (https://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.html) - 1,500+ Arch Linux Packages Compromised With Malware (https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html) - FBI Takes Down Outsider PhaaS Enterprise (https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html) - ShinyHunters Claims Council of Europe Hack (https://www.bleepingcomputer.com/news/security/council-of-europe-investigates-shinyhunters-data-breach-claims/) - North Korean Hackers Target Developers With Malicious Tools (https://thehackernews.com/2026/06/north-korean-hackers-are-turning.html) - Chinese APT UNC6508 Targets US Medical and Academic Research (https://cloud.google.com/blog/topics/threat-intelligence/prc-targets-us-medical-research/) - Jaguar Land Rover Ordered 30,000 Staff Password Resets After Cyberattack (https://databreaches.net/2026/06/15/jlr-ordered-30000-staff-to-reset-passwords-in-person-after-cyberattack/) - VHDX File Delivers Remcos RAT (https://isc.sans.edu/diary/rss/33080) - Linux-PAM Timing Attack (CVE-2026-54411) (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54411) - Microsoft Edge Chromium CVE Batch (https://msrc.microsoft.com/update-guide/) CVEs Referenced: CVE-2026-11640, CVE-2026-11645, CVE-2026-11662, CVE-2026-11668, CVE-2026-11677, CVE-2026-11684, CVE-2026-11685, CVE-2026-11688, CVE-2026-11693, CVE-2026-12010, CVE-2026-12012, CVE-2026-12016, CVE-2026-12019, CVE-2026-20262, CVE-2026-2441, CVE-2026-35273, CVE-2026-3909, CVE-2026-3910, CVE-2026-42824, CVE-2026-5281, CVE-2026-54411, CVE-2026-54420 Indicators of Compromise: IPs: 20.9.9.2, 20.12.7.2, 20.15.4.5, 20.15.5.3, 20.18.3.1, 26.1.1.2, 5.3.2.0 Full brief: https://carolinacleartech.com/brief/2026-06-16/