<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>EndlessFractal's Threat Intel Feed</title>
    <description>A combined RSS feed of the 60 most recent articles from various sources</description>
    <link>https://endlessfractal.github.io/Threat-Intel-Feed/feed.xml</link>
    <lastBuildDate>Wed, 17 Jun 2026 20:07:49 +0000</lastBuildDate>
    <item>
      <title>Rockwell Automation FLEX I/O EtherNet/IP Adapters</title>
      <link>https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-05</link>
      <pubDate>Tue, 16 Jun 2026 12:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Rockwell Automation FactoryTalk Analytics PavilionX</title>
      <link>https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-01</link>
      <pubDate>Tue, 16 Jun 2026 12:00:00 +0000</pubDate>
    </item>
    <item>
      <title>CISA Adds One Known Exploited Vulnerability to Catalog</title>
      <link>https://www.cisa.gov/news-events/alerts/2026/06/16/cisa-adds-one-known-exploited-vulnerability-catalog</link>
      <pubDate>Tue, 16 Jun 2026 12:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Rockwell Automation CompactLogix</title>
      <link>https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-04</link>
      <pubDate>Tue, 16 Jun 2026 12:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Over Two-Thirds of Security Pros Say Cyber Is Getting Harder</title>
      <link>https://www.infosecurity-magazine.com/news/security-pros-cyber-cyber-harder/</link>
      <pubDate>Tue, 16 Jun 2026 12:00:00 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-20262: Cisco SD-WAN Manager Zero-Day Can Lead to Root Privilege Escalation</title>
      <link>https://socprime.com/blog/cve-2026-20262-cisco-sd-wan-manager-zero-day/</link>
      <pubDate>Tue, 16 Jun 2026 12:12:57 +0000</pubDate>
    </item>
    <item>
      <title>Cardiac patients’ medical data stolen and held to ransom</title>
      <link>https://www.malwarebytes.com/blog/news/2026/06/cardiac-patients-medical-data-stolen-and-held-to-ransom</link>
      <pubDate>Tue, 16 Jun 2026 12:49:01 +0000</pubDate>
    </item>
    <item>
      <title>“Free World Cup stream” sites are serving scams, not football</title>
      <link>https://www.malwarebytes.com/blog/threat-intel/2026/06/free-world-cup-stream-sites-are-serving-scams-not-football</link>
      <pubDate>Tue, 16 Jun 2026 13:00:00 +0000</pubDate>
    </item>
    <item>
      <title>New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds</title>
      <link>https://thehackernews.com/2026/06/new-rokarolla-android-malware-steals.html</link>
      <pubDate>Tue, 16 Jun 2026 13:10:17 +0000</pubDate>
    </item>
    <item>
      <title>Rokarolla Trojan Combines Banking Fraud With Device Surveillance</title>
      <link>https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/</link>
      <pubDate>Tue, 16 Jun 2026 13:15:00 +0000</pubDate>
    </item>
    <item>
      <title>ShinyHunters Claims Council of Europe HR Data, Threatens Leak</title>
      <link>https://www.techrepublic.com/article/news-shinyhunters-council-europe-data-theft-claim-emea/</link>
      <pubDate>Tue, 16 Jun 2026 14:18:49 +0000</pubDate>
    </item>
    <item>
      <title>Fortinet Warned as Three Critical FortiSandbox Bugs Come Under Attack</title>
      <link>https://securityaffairs.com/193709/ai/fortinet-warned-as-three-critical-fortisandbox-bugs-come-under-attack.html</link>
      <pubDate>Tue, 16 Jun 2026 14:21:11 +0000</pubDate>
    </item>
    <item>
      <title>SprySOCKS Backdoor Expands From Linux to Windows</title>
      <link>https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/</link>
      <pubDate>Tue, 16 Jun 2026 14:30:00 +0000</pubDate>
    </item>
    <item>
      <title>Best Prime Day Tech Deals: Apple, Bose, Garmin, and More</title>
      <link>https://www.techrepublic.com/article/news-best-early-amazon-prime-day-tech-deals-2026/</link>
      <pubDate>Tue, 16 Jun 2026 14:48:00 +0000</pubDate>
    </item>
    <item>
      <title>What is the true nature of the shortcut file I thought was a privacy consent form?</title>
      <link>https://asec.ahnlab.com/en/94164/</link>
      <pubDate>Tue, 16 Jun 2026 15:00:00 +0000</pubDate>
    </item>
    <item>
      <title>It looks like a normal resume, but the infection begins the moment it is opened.</title>
      <link>https://asec.ahnlab.com/en/94165/</link>
      <pubDate>Tue, 16 Jun 2026 15:00:00 +0000</pubDate>
    </item>
    <item>
      <title>ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures</title>
      <link>https://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.html</link>
      <pubDate>Tue, 16 Jun 2026 17:41:28 +0000</pubDate>
    </item>
    <item>
      <title>Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting</title>
      <link>https://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.html</link>
      <pubDate>Tue, 16 Jun 2026 19:05:41 +0000</pubDate>
    </item>
    <item>
      <title>iRhythm Hit by Cyberattack, Patient Data Stolen and Ransom Demanded</title>
      <link>https://securityaffairs.com/193721/data-breach/irhythm-hit-by-cyberattack-patient-data-stolen-and-ransom-demanded.html</link>
      <pubDate>Tue, 16 Jun 2026 19:19:54 +0000</pubDate>
    </item>
    <item>
      <title>Infinite Campus: Salesforce Breach Exposed 137,000 Staff Records</title>
      <link>https://www.techrepublic.com/article/news-infinite-campus-salesforce-breach-school-staff-data/</link>
      <pubDate>Tue, 16 Jun 2026 21:27:29 +0000</pubDate>
    </item>
    <item>
      <title>India's Telegram ban draws criticism from Durov as company challenges order in court</title>
      <link>https://therecord.media/india-telegram-ban-challenged-in-court</link>
      <pubDate>Tue, 16 Jun 2026 23:00:00 +0000</pubDate>
    </item>
    <item>
      <title>GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say</title>
      <link>https://therecord.media/github-dismissed-reports-shai-hulud-deep-specter</link>
      <pubDate>Tue, 16 Jun 2026 23:00:00 +0000</pubDate>
    </item>
    <item>
      <title>AI in the underground: Curiosity, claims, and concerns</title>
      <link>https://www.sophos.com/en-us/blog/ai-in-the-underground-curiosity-claims-and-concerns</link>
      <pubDate>Wed, 17 Jun 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>State Digital Surveillance Risk Landscape</title>
      <link>https://www.recordedfuture.com/research/state-digital-surveillance-risk-landscape</link>
      <pubDate>Wed, 17 Jun 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>ISC Stormcast For Wednesday, June 17th, 2026 https://isc.sans.edu/podcastdetail/9976, (Wed, Jun 17th)</title>
      <link>https://isc.sans.edu/diary/rss/33082</link>
      <pubDate>Wed, 17 Jun 2026 02:00:04 +0000</pubDate>
    </item>
    <item>
      <title>CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution</title>
      <link>https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html</link>
      <pubDate>Wed, 17 Jun 2026 05:50:46 +0000</pubDate>
    </item>
    <item>
      <title>144 Mastra npm Packages Compromised via Hijacked Contributor Account</title>
      <link>https://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.html</link>
      <pubDate>Wed, 17 Jun 2026 07:38:24 +0000</pubDate>
    </item>
    <item>
      <title>China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints</title>
      <link>https://securityaffairs.com/193728/apt/china-linked-fishmonger-ports-sprysocks-to-windows-with-kernel-level-stealth-and-uefi-bootkit-hints.html</link>
      <pubDate>Wed, 17 Jun 2026 08:10:45 +0000</pubDate>
    </item>
    <item>
      <title>Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS</title>
      <link>https://www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/</link>
      <pubDate>Wed, 17 Jun 2026 08:45:00 +0000</pubDate>
    </item>
    <item>
      <title>FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data</title>
      <link>https://securityaffairs.com/193763/security/fulcrumsec-targets-novo-nordisk-leaks-clinical-and-research-data.html</link>
      <pubDate>Wed, 17 Jun 2026 08:45:05 +0000</pubDate>
    </item>
    <item>
      <title>Fifteen JetBrains Marketplace Plugins Found Stealing API Keys</title>
      <link>https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/</link>
      <pubDate>Wed, 17 Jun 2026 09:10:00 +0000</pubDate>
    </item>
    <item>
      <title>EdTech Faces a Cybersecurity Crisis: Data Breaches Surge</title>
      <link>https://securityaffairs.com/193777/data-breach/edtech-faces-a-cybersecurity-crisis-data-breaches-surge.html</link>
      <pubDate>Wed, 17 Jun 2026 09:16:23 +0000</pubDate>
    </item>
    <item>
      <title>Malwarebytes earns AV-TEST Top Product award, aces other third-party tests</title>
      <link>https://www.malwarebytes.com/blog/product/2026/06/malwarebytes-earns-av-test-top-product-award-aces-other-third-party-tests</link>
      <pubDate>Wed, 17 Jun 2026 09:41:46 +0000</pubDate>
    </item>
    <item>
      <title>EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks</title>
      <link>https://www.infosecurity-magazine.com/news/ukraine-included-eu-cyber-reserve/</link>
      <pubDate>Wed, 17 Jun 2026 09:45:00 +0000</pubDate>
    </item>
    <item>
      <title>Warner warns of CISA cuts, staffing gaps in letter to acting chief</title>
      <link>https://therecord.media/warner-warns-of-cisa-cuts-staffing-shortages</link>
      <pubDate>Wed, 17 Jun 2026 10:30:00 +0000</pubDate>
    </item>
    <item>
      <title>The Top 10 Attack Surface Exposures in 2026</title>
      <link>https://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.html</link>
      <pubDate>Wed, 17 Jun 2026 10:30:00 +0000</pubDate>
    </item>
    <item>
      <title>24 billion stolen records exposed online. Here’s what to do</title>
      <link>https://www.malwarebytes.com/blog/news/2026/06/24-billion-stolen-records-found-in-giant-data-dump-check-if-youre-affected</link>
      <pubDate>Wed, 17 Jun 2026 10:56:18 +0000</pubDate>
    </item>
    <item>
      <title>AI Use by the US Government</title>
      <link>https://www.schneier.com/blog/archives/2026/06/ai-use-by-the-us-government.html</link>
      <pubDate>Wed, 17 Jun 2026 11:04:04 +0000</pubDate>
    </item>
    <item>
      <title>New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps</title>
      <link>https://securityaffairs.com/193745/cyber-crime/new-rokarolla-android-trojan-targets-217-banking-and-crypto-apps.html</link>
      <pubDate>Wed, 17 Jun 2026 11:20:39 +0000</pubDate>
    </item>
    <item>
      <title>AI Threats and Alert Fatigue Challenge Cybersecurity Teams</title>
      <link>https://www.infosecurity-magazine.com/news/ai-threats-alert-fatigue-challenge/</link>
      <pubDate>Wed, 17 Jun 2026 12:30:00 +0000</pubDate>
    </item>
    <item>
      <title>The Agentic SOC: Solving Security’s Investigation Capacity Crisis in the Frontier AI Era</title>
      <link>https://www.sentinelone.com/blog/frontier-ai-and-agentic-soc/</link>
      <pubDate>Wed, 17 Jun 2026 13:00:35 +0000</pubDate>
    </item>
    <item>
      <title>Sensitive Enterprise Data Uploads to AI Models Double in a Year</title>
      <link>https://www.infosecurity-magazine.com/news/sensitive-ai-data-upload-doubles/</link>
      <pubDate>Wed, 17 Jun 2026 13:15:00 +0000</pubDate>
    </item>
    <item>
      <title>Google Adds New Android Controls for WhatsApp Backups, Password Transfers</title>
      <link>https://www.techrepublic.com/article/news-google-android-june-2026-system-updates/</link>
      <pubDate>Wed, 17 Jun 2026 13:26:16 +0000</pubDate>
    </item>
    <item>
      <title>Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats</title>
      <link>https://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.html</link>
      <pubDate>Wed, 17 Jun 2026 13:51:58 +0000</pubDate>
    </item>
    <item>
      <title>Serverless Phishing Kit on GitHub Targets Mexican Banks</title>
      <link>https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/</link>
      <pubDate>Wed, 17 Jun 2026 14:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Another Year, Another Win: SE Labs® Recognizes Symantec® Endpoint Security</title>
      <link>https://www.security.com/feature-stories/se-labs-awards-2026</link>
      <pubDate>Wed, 17 Jun 2026 14:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization</title>
      <link>https://thehackernews.com/2026/06/adversarial-exposure-validation-turns.html</link>
      <pubDate>Wed, 17 Jun 2026 14:58:00 +0000</pubDate>
    </item>
    <item>
      <title>North Korean Hiring Fraud Runs on AI and US Laptop Farms</title>
      <link>https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/</link>
      <pubDate>Wed, 17 Jun 2026 15:00:00 +0000</pubDate>
    </item>
    <item>
      <title>U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog</title>
      <link>https://securityaffairs.com/193775/hacking/u-s-cisa-adds-widget-factory-joomla-content-editor-jce-flaw-to-its-known-exploited-vulnerabilities-catalog.html</link>
      <pubDate>Wed, 17 Jun 2026 15:18:04 +0000</pubDate>
    </item>
    <item>
      <title>Rokarolla Android malware can take over your phone and steal banking logins</title>
      <link>https://www.malwarebytes.com/blog/mobile/2026/06/rokarolla-android-malware-can-take-over-your-phone-and-steal-banking-logins</link>
      <pubDate>Wed, 17 Jun 2026 15:34:15 +0000</pubDate>
    </item>
    <item>
      <title>DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months</title>
      <link>https://securityaffairs.com/193801/security/dragonforce-hid-inside-microsoft-teams-and-nobody-noticed-for-two-months.html</link>
      <pubDate>Wed, 17 Jun 2026 15:55:10 +0000</pubDate>
    </item>
    <item>
      <title>Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline</title>
      <link>https://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.html</link>
      <pubDate>Wed, 17 Jun 2026 16:00:56 +0000</pubDate>
    </item>
    <item>
      <title>The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th)</title>
      <link>https://isc.sans.edu/diary/rss/33084</link>
      <pubDate>Wed, 17 Jun 2026 16:01:33 +0000</pubDate>
    </item>
    <item>
      <title>Ozempic Maker Novo Nordisk Confirms Security Incident After $25M Hacker Demand</title>
      <link>https://www.techrepublic.com/article/news-novo-nordisk-1-3tb-theft-25m-demand-emea/</link>
      <pubDate>Wed, 17 Jun 2026 16:06:36 +0000</pubDate>
    </item>
    <item>
      <title>EU grants Ukraine access to cybersecurity reserve for major attacks</title>
      <link>https://therecord.media/ukraine-access-eu-cybersecurity-reserve</link>
      <pubDate>Wed, 17 Jun 2026 16:33:00 +0000</pubDate>
    </item>
    <item>
      <title>AI is accelerating cyberattacks—here’s how to stay ahead</title>
      <link>https://techcommunity.microsoft.com/blog/microsoft-entra-blog/ai-is-accelerating-cyberattacks%E2%80%94here%E2%80%99s-how-to-stay-ahead/4528592</link>
      <pubDate>Wed, 17 Jun 2026 17:00:00 +0000</pubDate>
    </item>
    <item>
      <title>Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development</title>
      <link>https://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.html</link>
      <pubDate>Wed, 17 Jun 2026 17:36:28 +0000</pubDate>
    </item>
    <item>
      <title>105K Chrome Installs Linked to Adware and Fake Google Traffic</title>
      <link>https://www.techrepublic.com/article/news-chrome-extensions-fake-traffic-user-data/</link>
      <pubDate>Wed, 17 Jun 2026 17:47:16 +0000</pubDate>
    </item>
    <item>
      <title>Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns</title>
      <link>https://therecord.media/britain-nation-state-cyberattacks-richard-horne-rusi</link>
      <pubDate>Wed, 17 Jun 2026 17:55:00 +0000</pubDate>
    </item>
    <item>
      <title>Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments</title>
      <link>https://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.html</link>
      <pubDate>Wed, 17 Jun 2026 18:14:24 +0000</pubDate>
    </item>
  </channel>
</rss>
