IAM & Security Weekly Briefing

Week of: June 21–27, 2026 Reporting window: Most recently completed Sunday–Saturday (excludes the in-progress week).

---

1. Executive Summary (TL;DR)

• Russian intelligence phishing campaigns now target Signal Backup Recovery Keys, enabling full message history theft and account takeover.
• FortiBleed credential-harvesting operation compromised 430,000+ FortiGate firewalls, recovering 110 million credentials globally.
• Cisco Unified CM and SD-WAN zero-days exploited in active attacks; CISA sets urgent patching deadlines.
• AI agent supply chain risks escalate: malicious GitHub repos trick AI coding tools, fake AI agent skills bypass security scanners, and Amazon Q Developer flaw exposed cloud credentials.
• Scattered Spider members plead guilty in Transport for London cyberattack; Poland busts SIM-swapping gang tied to crypto theft.
• Trump executive order sets 2030–2031 deadlines for federal post-quantum cryptography migration.
• Cisco acquires Astrix and WideField to add non-human identity (NHI) security to its stack.
• DifyTap vulnerabilities allow attackers to wiretap AI chat histories across tenants without authentication.

---

2. Top IAM & Security News

FBI: Russian hackers now target Signal backup recovery keys

• Source: BleepingComputer
• Link: BleepingComputer
• Date: June 26, 2026
• What happened: The FBI and CISA updated their warning about Russian intelligence phishing campaigns, noting attackers now coax targets into handing over Signal Backup Recovery Keys to access full message history and take over accounts.
• Why it matters: This evolution bypasses standard MFA protections — recovery keys persist across sessions, making this a high-impact identity takeover vector for government, military, and enterprise Signal users.

FortiBleed targeted FortiGate firewalls in 110 million-credential harvesting operation

• Source: The Hacker News
• Link: The Hacker News
• Date: June 23, 2026
• What happened: A Russian-speaking initial access broker engineered a Golang-based sniffer targeting 430,000+ FortiGate firewalls, collecting credential lists and brute-forcing exposed services to harvest 110 million credentials.
• Why it matters: Firewall credential theft enables lateral movement and persistent access to enterprise networks; organizations must audit exposed management interfaces and enforce MFA on all firewall admin accounts.

Cisco Unified CM flaw exploited after PoC reveals file-write path to root

• Source: The Hacker News
• Link: The Hacker News
• Date: June 24, 2026
• What happened: CVE-2026-20230 (CVSS 8.6) in Cisco Unified Communications Manager was weaponized within 24 hours of PoC publication, allowing unauthenticated remote attackers to gain root access.
• Why it matters: CISA set an urgent Sunday patching deadline; unified communications systems often have broad network access, making this a critical privilege escalation vector for identity compromise.

Scattered Spider hackers plead guilty on day 1 of trial

• Source: KrebsOnSecurity
• Link: KrebsOnSecurity
• Date: June 23, 2026
• What happened: Two key members of the Scattered Spider cybercrime group pleaded guilty to charges from the August 2024 cyberattack that crippled Transport for London.
• Why it matters: Scattered Spider is known for sophisticated social engineering and SIM-swapping to bypass MFA; this conviction signals increased law enforcement pressure on identity-based attack groups.

Trump order sets 2030 deadline for federal post-quantum crypto migration

• Source: The Hacker News
• Link: The Hacker News
• Date: June 23, 2026
• What happened: Executive Order 14409 sets December 31, 2030 for key establishment migration and December 31, 2031 for digital signatures on federal high-value assets and high-impact systems.
• Why it matters: Identity systems relying on current public-key cryptography (PKI, certificates, digital signatures) must begin migration planning now to meet these hard deadlines.

Cybersecurity firms targeted by fraudulent OpenAI organization invites

• Source: BleepingComputer
• Link: BleepingComputer
• Date: June 26, 2026
• What happened: Threat actors create OpenAI tenants impersonating legitimate companies and invite employees to join, tricking targets into submitting sensitive company information in chats and projects.
• Why it matters: AI platform identity spoofing is a new social engineering vector; organizations need to educate employees on verifying AI workspace invitations and restrict AI tool access policies.

Amazon Q Developer flaw could let malicious repos run code via MCP configs

• Source: The Hacker News
• Link: The Hacker News
• Date: June 26, 2026
• What happened: CVE-2026-12957 (CVSS 8.5) in Amazon Q Developer allowed malicious repositories to execute commands and steal cloud credentials when a developer opened and trusted the workspace.
• Why it matters: AI coding assistants with broad IDE/cloud access represent a new identity attack surface — credential theft via trusted development workflows bypasses traditional security controls.

---

3. AI, Identity & Emerging Tech

Clean GitHub repo tricks AI coding agents into running malware

• Source: BleepingComputer
• Link: BleepingComputer
• Date: June 27, 2026
• What happened: An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload invisible to security scanners, AI agents, and human reviewers.
• Why it matters: AI agents with code execution privileges are vulnerable to supply-chain attacks; organizations must apply least-privilege principles to AI agent identities and restrict repository trust models.

Fake AI agent skill passed security scans and reportedly reached 26,000 agents

• Source: The Hacker News
• Link: The Hacker News
• Date: June 23, 2026
• What happened: Security firm AIR built a fake AI agent skill that passed all tested security scanners and reached ~26,000 agents, including corporate accounts, via a popular skill marketplace and Instagram ad.
• Why it matters: Current AI agent marketplace security scanning is inadequate; enterprises need agent identity governance, approval workflows, and runtime monitoring for AI agent deployments.

Guardian Agents: The next layer of identity governance

• Source: The Hacker News
• Link: The Hacker News
• Date: June 26, 2026
• What happened: A guide highlights that AI agents inherit permissions and traverse systems at machine speed, but identity infrastructure built for human access cannot govern autonomous actors.
• Why it matters: Organizations must extend identity governance to non-human identities — including AI agents — with automated policy enforcement, continuous monitoring, and just-in-time access.

DifyTap bugs let attackers wiretap AI chat histories

• Source: Dark Reading
• Link: Dark Reading
• Date: June 22, 2026
• What happened: Four vulnerabilities in Dify (DifyTap) allowed attackers to silently read AI conversations from other customers' applications without authentication.
• Why it matters: AI application platforms handling sensitive data must enforce tenant isolation and authentication; this is a critical identity/access control failure in the AI middleware layer.

Stop your legacy infrastructure from hijacking your AI agents

• Source: The Hacker News
• Link: The Hacker News
• Date: June 22, 2026
• What happened: A Gartner presentation highlighted that attackers are circumventing AI security programs by using legacy infrastructure to hijack AI agents, with 71% of organizations piloting AI agents.
• Why it matters: Legacy identity and access systems are a blind spot — AI agent identities must be governed with the same rigor as human identities, including privileged access controls.

---

4. Cyber Threats & Attack Trends

FortiBleed: 110 million credentials harvested from 430,000+ FortiGate firewalls

• Source: Dark Reading
• Link: Dark Reading
• Date: June 23, 2026
• What happened: A Russian-speaking IAB engineered a Golang-based sniffer targeting FortiGate firewalls, collecting credential lists and brute-forcing exposed services since February 2026.
• Identity angle: Firewall admin credentials are high-value targets for lateral movement; this campaign demonstrates the scale of credential harvesting from network edge devices.

Poland busts SIM-swapping gang tied to millions in crypto theft

• Source: BleepingComputer
• Link: BleepingComputer
• Date: June 25, 2026
• What happened: Polish authorities arrested four members of an organized cybercrime group that breached telecom partners and hijacked email accounts to carry out SIM-swapping attacks.
• Identity angle: SIM-swapping bypasses SMS-based MFA; this reinforces the need for phishing-resistant MFA (FIDO2/WebAuthn) and mobile carrier account security.

Ukraine says Russian intelligence used fake support texts to steal messaging credentials

• Source: The Hacker News
• Link: The Hacker News
• Date: June 27, 2026
• What happened: The SSU and FBI uncovered a long-running Russian intelligence campaign using fake tech-support workers to trick government officials, military personnel, and activists into handing over messaging app credentials.
• Identity angle: Social engineering targeting messaging app credentials is a persistent, high-impact threat for high-value targets; organizations should enforce hardware-backed MFA and credential monitoring.

Amadey and StealC malware network disrupted, 27M stolen credentials recovered

• Source: The Hacker News
• Link: The Hacker News
• Date: June 24, 2026
• What happened: A coordinated law enforcement operation (Europol, Bitdefender, ESET, Microsoft) took down criminal infrastructure powering Amadey and StealC malware, recovering 27 million stolen credentials.
• Identity angle: Credential theft remains the primary initial access vector; organizations should deploy credential monitoring, enforce password rotation, and use MFA to mitigate stolen credential reuse.

Order-tracking app Shop abused to push callback phishing attacks

• Source: BleepingComputer
• Link: BleepingComputer
• Date: June 25, 2026
• What happened: Threat actors abuse the Shop app (Shopify's order tracker) by adding fake purchase receipts to trick users into providing sensitive data or installing remote access software.
• Identity angle: Trusted third-party app integrations are being weaponized for phishing; organizations should monitor for anomalous app activity and educate users on verifying purchase notifications.

---

5. Product Updates & Vendor News

Cisco adds NHI to security stack with Astrix, WideField acquisitions

• Source: Dark Reading
• Link: Dark Reading
• Date: June 26, 2026
• What happened: Cisco acquired Astrix and WideField to add non-human identity (NHI) security capabilities, joining the trend of making identity the primary control plane for agentic workloads.
• Why it matters: This signals major vendor investment in NHI governance — organizations should evaluate NHI security solutions as AI agent deployments scale.

GitHub updates actions/checkout to block common pwn request attack patterns

• Source: The Hacker News
• Link: The Hacker News
• Date: June