Cyber Threat Intelligence Briefing: What You Need to Know on June 25, 2026

The threat landscape is moving fast. From zero-days hitting critical infrastructure to new AI-evasive malware, here is your summary of the most critical security developments you need to track this week.

Active Exploits & Vulnerabilities

1- Cisco Catalyst SD-WAN:

A zero-day (CVE-2026-20245, CVSS 7.8) has been under active exploitation for at least two months. Root access for local, authenticated attackers is urgent.

2- Lantronix EDS5000:

CISA has issued an emergency warning for CVE-2025-67038 (CVSS 9.8). This critical code injection flaw in OT/serial-to-IP devices requires remediation by June 26, 2026.

3- Hoppscotch API Platform:

A critical, remotely exploitable flaw (CVE-2026-50160, CVSS 10.0) in self-hosted versions allows for total system compromise.

Curl Library: Six vulnerabilities discovered, including connection reuse errors that can bypass mTLS configurations.

Malware & Emerging Campaigns

1- Gaslight Malware:

New Rust-based macOS implant that uses prompt injection to sabotage AI-assisted security analysis tools.

2- Mistic Backdoor:

A stealthy new threat (aka MLTBackdoor) targeting insurance, education, and IT sectors.

3- Smart TV Proxyware:

Over 2,000 apps on LG and Samsung smart TVs have been found housing residential proxy software, potentially turning your devices into traffic relays for third parties.

Policy & Industry Wins

1- CISA BOD 26-04:

Government agencies face a new, aggressive 3-day remediation window to counter AI-accelerated threats.

2- FCC Action:

Today’s meeting focuses on hardening the Emergency Alert System (EAS) against state-sponsored and criminal actors.

3- Success in Law Enforcement:

A massive international takedown has disrupted the Amadey and StealC malware infrastructure, with 27 million credentials recovered.

Bottom line:

Speed is your greatest asset. Whether you are reviewing your OT exposure or updating your patch management cycle to meet new federal mandates, prioritize these items today. Are you seeing any of these indicators in your environment?

#CyberSecurity #ThreatIntel #CISO #Infosec #ZeroDay #CyberDefense #VulnerabilityManagement