🐞 Microsoft June 2026 Update Bug Exposes Recycle Bin Filenames in Deletion Dialog
Source: https://t.co/XubQ2f7fhZ
Microsoft has confirmed a new bug introduced by its June 2026 Patch Tuesday security update that causes Windows to display internal Recycle Bin filenames instead of the original user-facing filenames in file-deletion confirmation dialogs.
After installing the Windows security update released on June 9, 2026 (KB5094125), users attempting to permanently delete a single item from the Recycle Bin are greeted with a confirmation dialog showing the file's internal system name, such as [$Rxxxxx.ext], instead of the original filename.
#cybersecuritynews #windows
Funny how Microsoft attempts to fix Defender resulted in a bug that causes Defender to be unable to delete any malware with NTFS ADS file name, something like C:\test:mlwr.exe will never be deleted by Defender, will be detected but always fails to delete.
🚨 BREAKING: More than 400 Arch Linux User Repository packages have been compromised with infostealer malware and a rootkit.
Attacker posed as a trusted maintainer and "adopted" orphaned packages.
Arch maintainers are purging infected packages now. Audit your AUR installs.
💰 Researcher Hacked Google Using AI and Earned $500,000 Bug Bounty
Source: https://t.co/ktabKzmCWj
A security researcher known as brutecat has disclosed how an AI-driven fuzzing pipeline uncovered more than $500,000 in vulnerabilities across Google's infrastructure in under three months, exposing systemic access-control failures hidden inside roughly 1,500 APIs.
The researcher began by targeting Google's discovery documents machine-readable API specifications, similar to Swagger docs, that list all available endpoints, parameters, and methods. While these documents are publicly available for APIs like the YouTube Data API, many exist for internal Google APIs and require valid API keys to access.
#cybersecuritynews
⚠️ GreatXML BitLocker Bypass 0-Day Exploited Via Windows Defender Offline Scan
Source: https://t.co/OrjK0ZEGWr
A newly disclosed zero-day exploit, dubbed GreatXML, enables attackers with physical access to fully bypass BitLocker drive encryption on Windows systems by leveraging an obscure but common side effect of Windows Defender Offline Scan, no login required, under certain conditions.
GreatXML is a BitLocker security feature bypass that exploits the Windows Recovery Environment (WinRE) state triggered by Microsoft Defender's Offline Scan feature.
When a user or an attacker initiates a Windows Defender Offline Scan on a target machine, the system reboots into a special pre-boot recovery environment to perform the scan.
#cybersecuritynews
‼️🚨 BREAKING: Nightmare Eclipse just dropped GreatXML, a new BitLocker bypass 0-day vulnerability PoC.
He has a new GitHub account. Check it out before it gets deleted again: https://t.co/vvppJYU0HJ