June 2026 Patch Tuesday: what Security and IT teams should prioritise
June 2026 Patch Tuesday covers 110 approved patch records and 392 unique CVEs across Microsoft, Adobe and SAP.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Apple Moved Private Cloud Compute Onto Google’s Hardware. The Trust Model Had to Move With It.
Apple extended Private Cloud Compute onto Google Cloud and NVIDIA hardware, turning attestation, independent roots of trust and public verification into the privacy boundary.
Tchap’s Encryption Held. One Stolen Account Still Exposed Public Rooms Used by 73,467 Officials.
France says one hijacked Tchap account exposed public-room content associated with 73,467 officials. Private encrypted histories were not reported compromised.
A Web Page Was Enough. Chrome’s V8 Zero-Day Was Already Being Exploited.
Google patched an actively exploited V8 memory-corruption flaw reachable through a crafted web page. The fix is not complete until the browser restarts.
The VPN Bypass Came First. Qilin Ransomware Followed.
A Check Point IKEv1 authentication bypass was exploited for a month before disclosure, with at least one intrusion linked to a Qilin ransomware affiliate.
Cisco Live Protect Brings Runtime Shielding to Network Infrastructure
Cisco’s new infrastructure-security platform combines faster vulnerability research with runtime protections. It could reduce emergency patch pressure, provided temporary shields do not become permanent exceptions. Cisco announced an agentic platform for operating and defending critical IT infrastructure on 2 June.…
The Attack Did Not Steal Files. It Kept Serv-U From Serving Them.
CISA confirmed active exploitation of an unauthenticated SolarWinds Serv-U flaw that let one crafted request crash file-transfer services.
One Click in github.dev Could Reach Every Repository the Developer Could.
A malicious notebook could turn github.dev into a GitHub OAuth-token theft path with read and write access across the developer's repositories.
Google AI Threat Defense Tries to Connect Exposure, Detection and Remediation
Google’s new AI Threat Defense portfolio aims to connect threat intelligence, exposure context and code repair. Its value will depend on whether organisations can govern the decisions between those stages. Google announced AI Threat Defense on 27 May, presenting a…
The VPN Accepted the Cookie. The Attacker Entered Without Credentials.
Attackers exploited a GlobalProtect authentication-cookie bypass to obtain unauthorized VPN access before a public proof of concept appeared.