Cybersecurity Update: FortiBleed Hits 86K Devices, Unpatchable Apple A12/A13 Exploit, Klue Data Breach - June 19, 2026

Key points

• •On June 19, 2026, a critical unpatchable exploit named 'usbliter8' was discovered compromising Apple A12 and A13 SecureROM boot chains. This permanent vulnerability enables attackers to execute arbitrary code at a low-level hardware stage, impacting device security irrevocably.[The Hacker News RSS]
• •The FBI highlighted an alarming rise in malware-infected Traffic Distribution Systems (TDS) used to manage malicious internet traffic, signaling sophisticated infrastructure fueling cyberattacks. This alert issued on June 19, 2026, underscores the growing need for internet traffic monitoring to combat threats.[Cybersecurity Insiders][Cybersecurity Insiders]
• •CISA issued multiple warnings on June 19, 2026, regarding the FortiBleed vulnerability affecting 86,644 Fortinet FortiGate devices, urging organizations to patch and harden these systems to prevent credential exposures and active exploits. The severity of this flaw threatens critical network security infrastructures globally.[The Hacker News][The Hacker News RSS][Homeland Security Today][Homeland Security Today]
• •Apple patched a critical security flaw on June 19, 2026, in Beats Studio Buds that permitted attackers in close proximity to spy via the microphone. The CVE-2025-20701 vulnerability was assigned a CVSS score of 8.8, signaling a high-severity risk to user privacy.[The Hacker News RSS]
• •Accenture made a major investment by acquiring cybersecurity leader Dragos and other firms for $4.2 billion as of June 18, 2026, signaling a strong focus on operational technology and industrial cybersecurity, especially around critical infrastructure risk management.[ChannelLife Australia][Telecompaper][Industrial Cyber][Industrial Cyber][ChannelLife Australia][Telecompaper]
• •The UK's NCSC on June 19, 2026, warned of ongoing sophisticated cyberattacks targeting national infrastructure from Russia, China, and Iran, emphasizing that these sustained threats require increased resilience and robust defensive postures to protect critical services.[Industrial Cyber]
• •A breach at Klue on August 3, 2023, compromised OAuth tokens leading to Salesforce customer data theft and impacting cybersecurity firm Huntress. This incident reflects vulnerabilities in supply chain security and the risks inherent in third-party app integrations.[Help Net Security][Help Net Security][SecurityWeek][CISO Series][The Hacker News RSS]
• •Law enforcement agencies from multiple countries disrupted SocGholish's command-and-control servers on June 19, 2026, successfully removing malware infections from nearly 15,000 WordPress sites. This coordinated action significantly curtailed a dangerous cybercriminal operation.[The Hacker News RSS]
• •The Squidbleed vulnerability, disclosed on June 19, 2026, impacts all Squid Proxy versions by leaking sensitive internal memory in their default configuration, echoing the historic Heartbleed flaw and posing substantial risks to network security infrastructures using Squid.[Reddit /r/netsec]
• •The Gentlemen ransomware-as-a-service (RaaS) group employed the GentleKiller EDR framework to disable over 400 security processes prior to ransomware deployment, illustrating an advanced technique to evade detection and enhance attack success rates, as reported June 19, 2026.[The Hacker News RSS]

Relevant articles