Oracle Zero-Day Exploited, Gentlemen Ransomware Hits 478 Victims, BitLocker Bypassed - Cybersecurity Updates 2026-06-11

Key points

• •Visa revealed on June 11 that it exposed $2.6 billion in fraud connected to global scam networks, emphasizing the expansive nature of financial cybercrime impacting payment ecosystems worldwide. This highlights the urgent need for advanced fraud detection and prevention measures by financial institutions.[Cyber Magazine]
• •Oak Ridge National Laboratory's cybersecurity framework graduated from lab research to real-world deployment within electric grid systems by June 10, bolstering protection of critical energy infrastructure against cyber threats and signaling a major advancement in national cybersecurity resilience.[Newswise]
• •The Fortinet OT Cybersecurity Report from June 11 indicates that 53% of industrial organizations have appointed a Chief Information Security Officer, illustrating a growing recognition of cybersecurity governance in industrial sectors vital to national infrastructure and production continuity.[Cybersecurity Insiders]
• •A zero-day exploit CVE-2026-35273 in Oracle PeopleSoft was leveraged by the ShinyHunters group on June 11 to breach multiple universities, compromising data and issuing ransom demands, with Mandiant attributing the operation to UNC6240, showcasing the continuing threat of advanced persistent threat groups targeting education institutions.[The Hacker News RSS]
• •The newly found GreatXML exploit threatens Windows users by bypassing BitLocker encryption through manipulation of recovery partition XML files, as reported on June 11. This vulnerability exposes encrypted data to attackers, raising alarms over endpoint security for Windows systems.[The Hacker News]
• •The Gentlemen ransomware has rapidly infected 478 victims as of June 11 and propagates in a worm-like manner, combining this with double extortion tactics typical of ransomware-as-a-service operations, making it a highly formidable threat actor in global ransomware campaigns.[The Hacker News]
• •Novo's cybersecurity breach disclosed on June 11 compromised clinical trial patient data, prompting alerts for affected individuals to remain vigilant. This incident underscores the cybersecurity risks in the healthcare and pharmaceutical industries where sensitive personal data is at stake.[Fierce Pharma]
• •Researchers demonstrated on June 11 that the OpenClaw AI agent can be tricked into executing malicious code and leaking sensitive data through exploitable inputs, revealing emergent cybersecurity vulnerabilities in AI systems that require urgent mitigation strategies.[The Hacker News RSS]
• •On June 11, Lloyds introduced Agentic AI technology to improve real-time cyber fraud detection and prevention, representing an innovative use of AI in financial cybersecurity to enhance threat response capabilities and reduce fraud losses systematically.[Cyber Magazine]
• •GitHub’s June 11 announcement to disable npm install scripts by default in the upcoming npm version 12 aims to thwart supply chain attacks by preventing unintended malicious code execution, strengthening security paradigms for software developers and users globally.[The Hacker News RSS]

Relevant articles

Go deeper