Current Cybersecurity Threats and Vulnerabilities

Viasat confirms it was breached by Salt Typhoon. Microsoft’s June 2025 security update giveth, and Microsoft’s June 2025 security update taketh away. Local privilege escalation flaws grant root access on major Linux distributions. BeyondTrust patches a critical remote code execution flaw. SMS low cost routing exposes users to serious risks. Erie Insurance says their ongoing outage isn’t ransomware. Backups are no good if you can’t find them. Veeam patches a critical vulnerability in its Backup software. SuperCard malware steals payment card data for ATM fraud and direct bank transfers. We preview our Juneteenth special edition. Backing up humanity. 

Remember to leave us a 5-star rating and review in your favorite podcast app.

Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.

CyberWire Guest

Today, we are sharing an excerpt of our Juneteenth Special Edition conversation between Dave Bittner, T-Minus Space Daily’s Maria Varmazis, and CISO Perspectives podcast’s Kim Jones. Enjoy this discussion on the eve of Juneteenth and tune into your CyberWire Daily feed tomorrow on your favorite podcast app to hear the full conversation.

Selected Reading

Viasat hacked by China-backed Salt Typhoon in 2024 US telecom attacks (Cybernews)

Microsoft's June Patches Unleash a Cascade of Critical Failures (WinBuzzer)

New Linux udisks flaw lets attackers get root on major Linux distros (Bleeping Computer)

BeyondTrust warns of pre-auth RCE in Remote Support software (Bleeping Computer)

Two Factor Insecurity (Lighthouse Reports)

Erie Insurance: ‘No Evidence’ of Ransomware in Network Outage (Insurance Journal)

Half of organizations struggle to locate backup data, report finds (SC Media)

New Veeam RCE flaw lets domain users hack backup servers (Bleeping Computer)

Russia detects first SuperCard malware attacks skimming bank data via NFC (The Record)

Why one man is archiving human-made content from before the AI explosion (Ars Technica)

Audience Survey

Complete our annual audience survey before August 31.

Want to hear your company in the show?

You too can reach the most influential leaders and operators in the industry. Here’s our media kit. Contact us at cyberwire@n2k.com to request more info.

The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.

Learn more about your ad choices. Visit megaphone.fm/adchoices