Daily News - Jun 16th

Today, we cover urgent risk stories, including a CISA warning about an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel plugin, demanding immediate patching from government agencies and cPanel users alike. Fortinet users should also prioritize updates for critical FortiSandbox vulnerabilities now under active exploitation. We also expose how DragonForce ransomware abuses Microsoft Teams relays to hide command-and-control traffic, emphasizing the need for specific Teams traffic anomaly checks.Beyond immediate threats, we discuss "code sprawl" in AI—employees creating automations and agents outside security oversight—and the US crackdown on specific Anthropic AI models due to export control directives. Practical takeaways include configuring agents with MCP and Looker, and leveraging Cloudflare for secure agent deployment.Our three key actions for today are: patch critical vulnerabilities in cPanel LiteSpeed and Fortinet FortiSandbox immediately; deepen network monitoring, especially for unusual Microsoft Teams traffic; and establish clear AI governance to ensure safe innovation.