Archive snapshot

Wed, Jun 17 · 06:00 AM CDT

Archived briefing content rendered inside the ACSP site experience.

Archived briefing

Snapshot overview

Generated Wed, Jun 17 · 06:00 AM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories
5
Worth skimming
5
Tracked videos
0
NVD vulnerabilities
25

Top stories

Wed, 17 Jun 2026 15:08:46 +0530

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

9.4/10 · Must read/watch
The Hacker Newsmalwareai

Summary
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. "Every plugin poses as an AI coding as

Wed, 17 Jun 2026 11:20:46 +0530

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

9.3/10 · Must read/watch
The Hacker Newsvulnpolicy

Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation

Wed, 17 Jun 2026 13:08:24 +0530

144 Mastra npm Packages Compromised via Hijacked Contributor Account

9.2/10 · Must read/watch
The Hacker Newssupply-chainai

Summary
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack co

Wed, Jun 17 · 06:00 AM CDT

EU Security Experts to Support Ukrainian Organizations in Case of Cyber-Attacks

8.7/10 · Worth your time
Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, Jun 17 · 06:00 AM CDT

Fifteen JetBrains Marketplace Plugins Found Stealing API Keys

8.7/10 · Worth your time
Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Worth skimming

Wed, Jun 17 · 06:00 AM CDT

Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS

8.7/10 · Worth your time
Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, Jun 17 · 06:00 AM CDT

DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company

8.5/10 · Worth your time
Infosecurity Magazinevulnmalwareai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Wed, 17 Jun 2026 16:00:00 +0530

The Top 10 Attack Surface Exposures in 2026

8.1/10 · Worth your time
The Hacker Newsvulnidentity

Summary
Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier this year, which let attackers pull credentials and session tok

Wed, Jun 17 · 03:00 AM CDT

The founder's playbook: Building an AI-native startup

8.1/10 · Worth your time
Hacker Newsai

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 3 hours ago.

Wed, Jun 17 · 06:00 AM CDT

Cybersecurity Experts Urge US to Lift Ban on Anthropic's Frontier AI Models

8.0/10 · Worth your time
Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.