Cybersecurity Update June 5, 2026: SD-WAN Zero-Day Exploited, Everest Forms Plugin Attacks, Mythos AI Boosts EU Defenses

Key points

• •Cisco announced an actively exploited zero-day vulnerability in its SD-WAN product on June 5, 2026, highlighting ongoing threats to network infrastructure and compelling enterprises to urgently apply mitigations.[Cybersecurity Dive]
• •A critical remote code execution vulnerability (CVE-2026-3300) in Everest Forms Pro, affecting about 4,000 WordPress sites, is being actively exploited by hackers to fully compromise affected websites, raising concerns for widespread WordPress security.[The Hacker News RSS]
• •Supply chain attacks targeting the npm ecosystem through IronWorm and a new Miasma Worm variant have compromised over 50 packages, showing increasing threats to software development dependencies and open-source trust.[The Hacker News]
• •The FCC plans to strengthen cybersecurity regulations for emergency alert systems to guard against cyberattacks aimed at disrupting national alert mechanisms, with a vote anticipated soon to update rules and mitigate such risks.[TVTechnology][TVTechnology]
• •The Android spyware named Asin is targeting Arabic users via social engineering through fake news, PDFs, and war map apps, representing a targeted campaign that exploits regional sociopolitical contexts for cyber espionage.[The Hacker News]
• •IBM i Management Central version V7R4 and earlier suffers from a serious unauthenticated remote code execution vulnerability accessible via port 5555, enabling attackers to breach systems without credentials and increasing risk to enterprise deployments.[Reddit /r/netsec]
• •The PCPJack threat group hijacked 230 cloud servers from leading providers AWS, Google Cloud, and Azure to assemble a stealthy SMTP relay network, highlighting the persistent abuse of cloud infrastructure for malicious spam and phishing campaigns across multiple continents.[The Hacker News RSS]
• •U.S. Senator Mark Warner introduced legislation to restore annual federal funding to $50 million for MS-ISAC, enhancing cybersecurity support for state and local governments, addressing critical gaps in public sector cyber defenses amid increasing attacks.[StateScoop]
• •The EU's lead cybersecurity agency will gain early access to Mythos AI technology, a development expected to bolster Europe’s defenses against sophisticated cyber threats through advanced AI-driven detection and response capabilities.[CPO Magazine]
• •A whistleblower, a former IBM cyber executive, has accused IBM of concealing multiple data breaches, raising serious questions about corporate cybersecurity transparency and governance at one of the world's largest technology companies.[TechCrunch]

Relevant articles