A week in security (June 15 – June 21)
2026-06-22T08:51:56Z•8e149b9f2ff7257f2b0a0535e0cf345e6f14bcad4eef239ce4a18975ba98309e
24-billion-recordsandroid-banking-trojanapple-beats-studio-budsbluetooth-vulnerabilitydata-breachdeepfake-takedownetherratfake-github-malwareirhythmkodak-breachlaw-enforcementmalware-distributionmicrosoft-defenderphishingransom-extortionroblox-malwarerogueplanetrokarollashinyhunterssocgholishsteam-phishing
What happened
Malwarebytes' weekly roundup (June 15–21, 2026) covers multiple high-impact incidents: a global crackdown cleaned nearly 15,000 sites delivering SocGholish fake-browser-update scams; Apple patched a Beats Studio Buds Bluetooth flaw that could let nearby attackers eavesdrop; Microsoft is developing a fix for “RoguePlanet,” an unpatched Defender vulnerability that can grant full system control. Researchers also disclosed Rokarolla, an Android banking trojan targeting 200+ banking and crypto apps and capable of device takeover, and uncovered an infrastructure distributing EtherRAT, phishing pages
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 8e149b9f2ff7257f2b0a0535e0cf345e6f14bcad4eef239ce4a18975ba98309e
- Enrichment time
- 2026-06-22T08:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.