15 Malicious JetBrains Plugins Stole AI API Keys from 70,000 Developers

LastPass confirms data breach in Klue supply chain attack

LastPass xác nhận dữ liệu khách hàng trong môi trường Salesforce bị truy cập sau cuộc tấn công chuỗi cung ứng nhằm vào Klue hôm 12/6. Nhóm tống tiền Icarus đã xâm nhập hạ tầng Klue bằng thông tin đăng nhập cũ, đánh cắp token OAuth kết nối Klue với Salesforce của khách hàng. Dữ liệu bị lộ bao gồm tên, số điện thoại, email, địa chỉ, thông tin hỗ trợ và dữ liệu CRM. LastPass cho biết sản phẩm cốt lõi, dịch vụ và kho dữ liệu khách hàng không bị ảnh hưởng.

Lập trình viên nên đọc bài này để hiểu rõ về cách tấn công supply chain attack hoạt động như thế nào, từ đó nâng cao kiến thức bảo mật cho các ứng dụng và hệ thống của mình, đặc biệt là khi sử dụng các dịch vụ cloud như Salesforce.

simonecorsi/mawesome GitHub Action has been compromised

Vào ngày 24/6/2026, repository simonecorsi/mawesome trên GitHub bị tấn công thông qua phương pháp force-push, khiến các version tags trỏ tới các commit độc hại. Các workflow sử dụng những tags này sẽ thực thi mã do kẻ tấn công kiểm soát trên GitHub Actions runners, tương tự vụ tấn công vào codfish/semantic-release-action cùng ngày.

Lập trình viên nên đọc bài này để hiểu cách bảo vệ các GitHub Actions của mình khỏi các tấn công force-push và code injection, đặc biệt khi sử dụng các repository công cộng có thể bị lừa đảo.

Threat landscape for SMBs in 2026: fake AI tools, phishing and more

Kaspersky's 2026 SMB threat report reveals a nearly fivefold increase in cyberattacks disguising malware as popular AI tools like Claude compared to 2025. Fake messenger apps remain the most common lure with over 414,000 attacks detected in the first four months of 2026. Phishing campaigns increasingly exploit legitimate platforms (OneDrive, Zoom Docs) to bypass email filters. Dark web analysis shows SMBs and mid-sized businesses account for more than half of all initial access listings sold by brokers, with Middle East, Africa, and Latin America seeing significant increases. The report includes a practical cybersecurity action plan covering access controls, employee training, backups, and specialized security solutions.

Economist Columnists Say U.S. Quantum Investments Show Promise — But Need Clearer Rules

An Economist opinion piece by Joshua Zoffer and Chris Miller argues quantum computing is one of the strongest cases for U.S. industrial policy due to its national-security implications and immature supply chain. The Trump administration's $2 billion investment across nine quantum companies — spanning multiple hardware architectures — is praised as a smart diversified bet. The authors warn, however, that broader federal equity investments across tech sectors need clearer guiding principles, suggesting warrants over direct equity stakes and emphasizing that intervention should be reserved for areas with genuine national-security needs that markets won't address alone.

Why AI and Compliance Are Forcing A New Security Operating Model, with Rapid7's Corey Thomas & Sabeen Malik

Rapid7's Corey Thomas and Sabeen Malik discuss how frontier AI and evolving compliance requirements are forcing a new security operating model. AI is accelerating vulnerability discovery faster than existing standards and governance frameworks can handle, creating noise rather than safety unless paired with exploitability context. Compliance is shifting from annual snapshots to continuous evidence collection. The future model is AI-driven but human-led, connecting security operations, risk management, and compliance through live operational context rather than disconnected reports.

WISeKey and SEALSQ Plan Nasdaq Listing for Quantisimo Through GigCapital8

WISeKey and SEALSQ have established Quantisimo Corp., a joint venture special purpose vehicle, and signed a non-binding letter of intent with GigCapital8 (a SPAC) to pursue a Nasdaq listing. The proposed business combination values Quantisimo at approximately $575 million pre-money, with ambitions to grow to $2 billion through acquisitions of up to five additional quantum companies. Quantisimo aims to become a publicly traded platform focused on trusted quantum technologies, drawing on WISeKey's cybersecurity expertise and SEALSQ's semiconductor and post-quantum security portfolio. The transaction is expected to close in Q1 2027, pending regulatory and shareholder approvals.

Klue says the hackers who stole its customer data are deleting it, but a second group has emerged with extortion demands

Klue, the market intelligence firm whose breach exposed customer data at LastPass, HackerOne, and others, says the original hacking group Icarus is now deleting the stolen data. However, a second unnamed hacker group claims to have obtained the data from Icarus and is extorting affected companies directly, demanding payment or threatening to leak everything. Icarus reportedly told Klue the second group only has data samples for a subset of customers, not the full dataset, and instructed Klue to tell customers not to pay the second group. The breach stemmed from a compromised third-party credential from 2022 that was never revoked, granting OAuth access to customers' Salesforce environments. Over a dozen companies including Gong, Jamf, HackerOne, and LastPass have confirmed they were affected.