Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware crim about law enforcement probe
2026-06-30T19:23:56Z•d4e66f95f8db7fb1af9f668d0198811d866ad5e38c82ecbd43f53aa3d5626ba2
.bank‑registry0dayaccess‑brokerapi‑exposurebanking‑registry‑leakbootrom‑exploitciscocloud‑credentialscode‑executioncredentials‑leakdata‑breachexploit‑repogit‑repo‑exploitinsider-threatiphone‑exploitmistic‑backdoornpm‑poisoningpayroll‑datapeople‑softransomwareransomware‑gangssoftware‑supply‑chainssn‑exposuresupply‑chainvulnerability‑exploitation
What happened
A roundup of mid‑June to late‑June 2026 security news: allegations that a Huntress threat hunter improperly alerted a ransomware actor (insider‑threat risk); multiple active exploit campaigns and disclosures including an anonymous 0‑day 'exploitarium' repo, an Amazon Q flaw that let malicious Git repos execute code and steal cloud credentials, and the release of a BootROM-style exploit for A12/A13 iPhones. Supply‑chain and developer attacks continue — the Miasma campaign poisoned 20+ npm packages to harvest developer secrets — while large data exposures surfaced (KDDI leaked 14.2M managed‑mail
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- d4e66f95f8db7fb1af9f668d0198811d866ad5e38c82ecbd43f53aa3d5626ba2
- Enrichment time
- 2026-06-30T19:23:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.