Security Digest - June 17, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-06-17 16:51:32 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• Microsoft working on Defender patch for RoguePlanet zero-day - (BleepingComputer) System.Xml.XmlElement

  Action: Review security controls and policy updates.

💻 AppSec

• 15 JetBrains Marketplace plugins were quietly stealing developers’ AI API keys (~70,000 installs) - (Reddit r/cybersecurity) Monitor developer tool vulnerabilities and supply chain risks.

• CVE-2026-46609 - (NVD) Review .NET runtime vulnerabilities and apply patches.

• CVE-2026-46612 - (NVD) Monitor developer tool vulnerabilities and supply chain risks.

• CVE-2026-46614 - (NVD) Monitor developer tool vulnerabilities and supply chain risks.

• CVE-2026-46616 - (NVD) Review .NET runtime vulnerabilities and apply patches.

• CVE-2026-46617 - (NVD) Monitor developer tool vulnerabilities and supply chain risks.

• CVE-2026-46618 - (NVD) Monitor developer tool vulnerabilities and supply chain risks.

• We published research at HCII 2024 on attacker-perspective cybersecurity awareness training — sharing the paper and the artifact - (Reddit r/cybersecurity) Review .NET runtime vulnerabilities and apply patches.

🛡 Security Ops

• A strange sign of how much cybersecurity awareness has changed over the last decade. - (Reddit r/cybersecurity) Review CA/MFA settings for tightening opportunities.

• CEO Password Security Fail: “The Register” describes a company where the CEO stored every employee’s username and password in a single Excel file so he could access their email accounts… - (Reddit r/cybersecurity) Review CA/MFA settings for tightening opportunities. Review Office update channel health and security baseline compliance.

🛠 Infrastructure & Endpoint Control

• CEO Password Security Fail: “The Register” describes a company where the CEO stored every employee’s username and password in a single Excel file so he could access their email accounts… - (Reddit r/cybersecurity) Review CA/MFA settings for tightening opportunities. Review Office update channel health and security baseline compliance.

• Geoblocking email for “security” - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance.

• Hackers Abuse Cloud Logging Services to Evade Detection and Defender’s Visibility - (CybersecurityNews) Review security controls and policy updates.

• Millions of users to benefit from Windows 11’s new performance boost on Adobe Photoshop - (Neowin) Confirm Adobe exposure; push updated deployment. Validate workstation security baseline and update compliance.

• My favorite file manager for Windows 11 finally gets a long-requested feature - (Neowin) Validate workstation security baseline and update compliance.

• The company I work for makes engineers and field technicians members of the Local Administrators group. - (Reddit r/cybersecurity) Review security controls and policy updates.

• Windows 11 KB5094126, KB5093998 bugging out Office apps but it may not be Microsoft’s fault - (Neowin) Evaluate update rings and expedite actions if needed. Validate workstation security baseline and update compliance.

🔍 Quick Links (Watch Items)

• 27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely - (CybersecurityNews)
• DORA Law - who must actually deliver the ICT security training to staff/employees? 1st line of defence or 2nd line? - (Reddit r/cybersecurity)
• 15 JetBrains Marketplace plugins were quietly stealing developers’ AI API keys (~70,000 installs) - (Reddit r/cybersecurity)
• Geoblocking email for “security” - (Reddit r/cybersecurity)
• Advice on professional accreditations - (Reddit r/cybersecurity)
• What is a SOC 2 report, and why does every enterprise customer ask for it before signing? - (Reddit r/cybersecurity)
• CISA orders feds to patch max severity Joomla plugin flaw by Friday - (BleepingComputer)
• A strange sign of how much cybersecurity awareness has changed over the last decade. - (Reddit r/cybersecurity)
• CEO Password Security Fail: “The Register” describes a company where the CEO stored every employee’s username and password in a single Excel file so he could access their email accounts… - (Reddit r/cybersecurity)
• Microsoft working on Defender patch for RoguePlanet zero-day - (BleepingComputer)