cybersecurityMonday, June 29, 2026
Today's cybersecurity news is dominated by state-backed cyber campaigns. Dutch intelligence exposed a Russian operation hijacking Signal and WhatsApp accounts, while Israeli officials report a surge in Iranian attacks. Meanwhile, a new theory on prompt injection attacks offers a fresh lens on AI security flaws.
Two intelligence disclosures today paint a picture of escalating state-sponsored cyber operations.
Dutch intelligence details a Russian campaign using fake Signal Support chatbots to steal verification codes and linked-device features to hijack accounts. This is a concrete, ongoing threat to encrypted messaging users worldwide.
Israeli cyber chief reports Iranian attacks tripled year-over-year to 4,800 incidents in June 2026, directly tied to the U.S.-Israeli offensive. The scale shift is notable even for a region accustomed to cyber conflict.
A new paper reframes prompt injection as a fundamental role confusion problem in LLMs.
The paper argues LLMs cannot distinguish their own reasoning from injected content, and introduces CoT Forgery to exploit this. It reframes prompt injection as a structural flaw, not just a prompt engineering issue.
The FCC updates rules for critical infrastructure, and a Chinese AI model challenges US dominance in cybersecurity tasks.
The FCC's new rules target hijacking of Emergency Alert Systems and undersea cable security. This is a rare regulatory move on physical infrastructure that underpins global internet connectivity.
Zhipu AI's GLM-5.2 matches Anthropic's Mythos on bug-finding and beats GPT-55 on agentic benchmarks. It signals Chinese AI models are closing the gap in cybersecurity-relevant tasks, with open-weight availability adding pressure.
design roundup
books roundup
food roundup
infrastructure roundup
space exploration roundup
geopolitics roundup
