A Record-Breaking Patch Tuesday for June 2026
2026-06-10T01:23:28Z•74ce33c93a3dfc924de8f7737697dfcfd0e23cc0a51d1b17703cd7f81a537bd6
AWS GovCloud credentialsCISA data leakCanvas breachDDoSGitHub exposureInstagram account takeoverIoT botnetKimwolf botnetMeta AI support botMicrosoft Patch TuesdayNetherlands server seizureRussian influence operationsScattered Spidercritical vulnerabilitieseducation data extortionhosting abuselaw enforcement arrestspublic exploit codesocial engineeringzero-day
What happened
A June 2026 KrebsOnSecurity feed covering a spate of high-impact cyber incidents: Microsoft shipped a record ~200 fixes (nearly 36 rated critical) with public exploit code for multiple flaws; attackers abused Meta’s AI support assistant to hijack Instagram accounts; a CISA contractor publicly leaked AWS GovCloud credentials and internal build artifacts on GitHub; a large Canvas data-extortion attack disrupted US schools affecting hundreds of millions of records; law enforcement actions included the Netherlands seizing ~800 servers tied to Russian operations and the arrest of the alleged KimwfI
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 74ce33c93a3dfc924de8f7737697dfcfd0e23cc0a51d1b17703cd7f81a537bd6
- Enrichment time
- 2026-06-10T01:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.