Daily digest

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

President Trump signed EO 14409 on June 22, requiring federal agencies to migrate high-value assets and high-impact systems to post-quantum cryptography by December 31, 2030, and digital signatures by December 31, 2031. National security systems are handled on a separate track. The order establishes hard statutory deadlines where previous NIST guidance had only set targets.

Why it matters: CMMC and NIST 800-171 requirements for CUI protection will almost certainly be updated to reference NIST PQC standards (FIPS 203/204/205) on a timeline tied to this EO — start inventorying cryptographic dependencies in your M365 GCC High integrations, VPN endpoints, and AWS GovCloud connections now rather than waiting for a DFARS clause update.

Cisco Unified CM Flaw CVE-2026-20230 Now Exploited in Attacks

CVE-2026-20230 (CVSS 8.6), an improper input validation flaw in Cisco Unified Communications Manager and Unified CM SME, is now being actively exploited following public release of a proof-of-concept. The unauthenticated remote vulnerability allows attackers to perform server-side request forgery and has a documented file-write path to root. Cisco had previously disclosed the flaw but exploitation has now been confirmed in the wild.

Why it matters: If Cisco UCM is part of your voice/UC infrastructure, this moves from 'patch soon' to 'patch now' — active exploitation with an unauthenticated attack vector and a root escalation path means it meets the threshold for emergency change under most CMMC-aligned change management policies.

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

A Russian-speaking initial access broker has been running a campaign called FortiBleed since February 2026, targeting over 430,000 FortiGate firewalls globally using a custom Golang-based sniffer. The operation harvested approximately 110 million credentials through a combination of exposed service discovery, brute force, and credential list collection. The campaign is ongoing.

Why it matters: If FortiGate appliances are anywhere in your perimeter or used by upstream/downstream contractors who connect to your environment, assume credentials from those devices may be circulating on IAB markets — audit VPN and admin account credentials sourced from or transiting FortiGate devices and enforce MFA on all remote access entry points.

LastPass Confirms Data Breach in Klue Supply Chain Attack

LastPass confirmed that attackers accessed customer data stored in its Salesforce environment after stealing the company's OAuth tokens in a supply chain attack on application vendor Klue. The breach is part of a broader campaign — the 'Icarus' group used stolen Klue OAuth tokens to reach multiple customers' Salesforce instances. LastPass is notifying affected customers.

Why it matters: This is a textbook OAuth token supply chain attack — if your environment uses any SaaS-to-SaaS integrations (including Salesforce connectors or any app that brokers OAuth access to M365), audit authorized OAuth app grants and third-party token scopes immediately; NIST 800-171 requires protecting CUI from unauthorized disclosure, and a compromised integration could expose it silently.

Stealthy Mistic Backdoor Linked to Ransomware Access Broker KongTuke

A newly identified backdoor called Mistic has been observed in financially motivated attacks targeting organizations in insurance, education, IT, and professional services sectors. Researchers have attributed the malware to KongTuke, an initial access broker known to sell access to ransomware operators. The backdoor is designed for stealth and persistence.

Why it matters: Professional services and IT sectors are explicitly named as targets — if your organization provides managed services or operates in a contractor ecosystem, you are in the target profile; ensure endpoint detection on your Intune-managed fleet has updated signatures and review any anomalous outbound connections.

'Cordyceps': Malicious Pull Requests Threaten CI/CD Developer Workflows

A CI/CD attack pattern dubbed 'Cordyceps' exploits the pull_request_target workflow trigger in GitHub Actions to run malicious code with full workflow privileges. The weakness has been found affecting repositories including Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache Doris, Cloudflare Workers SDK, and the Python Software Foundation's Black formatter. GitHub released an update to actions/checkout on June 18 to block common variants of this attack.

Why it matters: If your Ansible playbooks, infrastructure-as-code, or any internal tooling pulls dependencies from or runs CI/CD pipelines against affected upstream repos (particularly Azure Sentinel), verify you are using the updated actions/checkout and audit any workflow files using pull_request_target for untrusted input handling.

Fake AI Agent Skill Passed Security Scans and Reached 26,000 Agents

Security firm AIR published research demonstrating that a deliberately malicious AI agent skill distributed via a popular marketplace and Instagram advertising reached approximately 26,000 agents, including corporate accounts, without being flagged by any tested security scanner. The payload was intentionally benign (email collection only) to prove the point without causing harm. Every AI skill security scanner tested returned a clean result.

Why it matters: If your environment includes a self-hosted or SaaS-connected AI agent stack, current automated vetting tools for third-party skills cannot be trusted — apply the same third-party software vetting rigor you would to any code package, and consider restricting AI agent skill installation to an approved list pending better tooling.

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Researchers identified three malicious npm packages — including typosquats of legitimate PostCSS tooling — that deliver a Windows-based remote access trojan. The packages accumulated hundreds of downloads before discovery and were published within the past month by a single npm account. The attack targets developer workstations running Windows.

Why it matters: Developers on your Intune-managed Windows 11 fleet pulling npm dependencies are a viable infection vector; ensure software composition analysis (SCA) is integrated into any internal CI pipelines and consider enforcing npm package allow-listing or private registry mirroring for build environments.

Windows 11 KB5095093 Preview Update Introduces Point-in-Time Restore Feature

Microsoft released KB5095093, a preview cumulative update for Windows 11 24H2 and 25H2, which fixes multiple bugs and introduces a new Point-in-Time restore feature. The update is optional at this stage and is being gradually rolled out. It also includes additional feature changes alongside the bug fixes.

Why it matters: Preview updates require explicit opt-in via Intune or Windows Update for Business policies — verify your update ring configurations are not inadvertently enrolling production endpoints in optional preview builds, which can introduce instability before Microsoft quality gates.

AWS Debuts Lambda MicroVMs with Up to 8 Hours Runtime

AWS has introduced Lambda MicroVMs, a new execution environment for AWS Lambda that extends the maximum runtime to 8 hours and provides stronger isolation suitable for running untrusted code, AI agents, and long-running tasks. The feature uses microVM-based isolation as opposed to the standard container runtime. It is positioned for agentic AI workloads and security-sensitive compute tasks.

Why it matters: For AWS GovCloud workloads, extended Lambda runtimes with microVM isolation could replace some EC2-based long-running jobs with a lower-overhead, better-isolated option — worth evaluating whether GovCloud region availability matches commercial launch timing before building new workflows around it.

Embedding Forbidden Text in Spyware to Discourage AI Analysis

At least one malware developer has been observed embedding policy-triggering content (text referencing nuclear and biological weapons) inside JavaScript comment blocks within spyware payloads. The technique does not affect execution but causes AI-based analysis tools to refuse to process the file, effectively blinding automated malware triage pipelines. The content is inert at runtime but disrupts AI safety filters on analysis platforms.

White House PQC Order 'Lights a Fire' Under Post-Quantum Transition

Federal News Network reports that the Trump administration's post-quantum cryptography executive order is accelerating agency planning timelines, though significant questions remain around funding and implementation guidance. Agency officials and industry representatives describe the hard deadlines as a forcing function that previous voluntary NIST guidance lacked. Key open questions include how costs will be appropriated and how legacy systems will be prioritized.