Cybersecurity Watch June 17, 2026: Major Ransomware Attacks, Zero-Day Flaws & Critical Vulnerabilities

Hackers stole employee data from Nintendo systems in a cyberattack on June 17, 2026, and are demanding a ransom of $2 million. This breach highlights the persistent cybersecurity threats targeting large gaming companies.

In June 2024, iRhythm Technologies experienced a data breach exposing patient information in its cardiac monitoring systems. The incident underscores ongoing cybersecurity vulnerabilities in healthcare technology.

An Australian Financial Services (AFS) licensee was ordered on June 17, 2026, to pay AU$2.5 million due to cybersecurity failures. This significant legal penalty stresses the importance of cybersecurity compliance in the financial sector.

A hacking group claimed a major cyberattack on pharmaceutical company Novo Nordisk on June 16, 2026, attempting to extort $25 million. The incident reflects escalating ransomware threats in the healthcare industry.

On June 17, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about an actively exploited critical Joomla Content Editor (JCE) vulnerability enabling PHP code execution. This flaw poses a significant risk to organizations using the platform.

Microsoft confirmed on June 17, 2026, a zero-day privilege escalation vulnerability, CVE-2026-50656, in RoguePlanet Defender with a CVSS score of 7.8. A security patch is currently in development to address this critical flaw.

The cyber extortion group FulcrumSec leaked initial samples from a 1.3TB data theft following a failed $25 million ransom demand from Novo Nordisk on June 17, 2026. This demonstrates the ongoing risks of ransomware groups exposing stolen sensitive healthcare data.

A supply chain attack called easy-day-js compromised 144 npm packages linked to the Mastra framework on June 17, 2026. This breach affects JavaScript and TypeScript AI applications, heightening concerns about vulnerabilities in open-source software ecosystems.

On June 17, 2026, a ransomware attack on Mackay Sugar disrupted operations in Australian mills. The incident prompted an analysis detailing cybersecurity defenses and lessons learned to mitigate future disruptions in critical infrastructure.

A zero-day vulnerability affecting PeopleSoft software was discovered on June 17, 2026, exposing about 100 universities to potential hacking. This flaw poses risks to sensitive academic data and system availability.