New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever
2026-06-21T19:23:32Z•6168554f0301d3f87e3f5768bd487021bbee05e47f15dc70b2a196fd58678c4c
AI securityChinaClickOnceMicrosoftPatch Tuesdaycontinuous-identityexposure-managementidentitysecurity-operationssupply-chainthreat-landscapevulnerabilitieszero-day
What happened
This CrowdStrike blog feed (June 9–18, 2026) highlights multiple security topics: a two-part analysis of new abuse techniques for Microsoft ClickOnce application deployment (attacker persistence and delivery abuses); the June 2026 Patch Tuesday review covering Microsoft’s fixes for 206 vulnerabilities including three publicly disclosed zero-days; strategic posts on securing AI after Executive Order 14409 and CrowdStrike’s Continuous Identity for AI agents; availability of Falcon Exposure Management for third‑party environments; identity initiatives (OpenID/IDPro); and the 2026 TechnologyThreat
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 6168554f0301d3f87e3f5768bd487021bbee05e47f15dc70b2a196fd58678c4c
- Enrichment time
- 2026-06-21T19:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.