News Brief

June 2026 Patch Tuesday set an all-time record with 198 CVEs, including three zero-days. FIRST.org now forecasts 66,000 CVEs for the full year. AI vulnerability discovery tools are reshaping what patch management looks like.

Palo Alto Networks Unit 42 disclosed a Vertex AI SDK vulnerability where predictable staging bucket names let attackers hijack model uploads and achieve code execution across tenant boundaries. Patched in April 2026, disclosed June 16.

Trump's June 2 EO established a voluntary 30-day government review window for frontier AI, a new AI cybersecurity clearinghouse, and criminal prosecution priority for AI-enabled attacks.

Sysdig documented an LLM agent autonomously driving lateral movement from a marimo RCE to a PostgreSQL dump across four pivots in under two minutes. What this means for detection.

CISA