Daily Reading for 2026-06-18
Daily Reading for 2026-06-18
Security
Security Risk Advisors
- TB20260617 – FortiBleed
- 🚩 GlassWASM hides malware inside VS Code extensions and uses the Solana blockchain as a resilient command-and-control platform.
- 🚩 ClickFix intrusion chains Potemkin, RMMProject, EtherRAT, and Cloudflare tunnels into full network compromise.
- Vertex AI SDK flaw enables cross-tenant model poisoning and remote code execution through bucket squatting attacks.
Microsoft Security Blog
- From package to postinstall payload: Inside the Mastra npm supply chain compromise
- Crypto Clipper uses Tor and worm-like propagation for persistence and control
- Beyond the benchmark: Advancing security at AI speed
- ​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report
- AI is accelerating cyberattacks—here’s how to stay ahead