Cybersecurity Today

A special crossover episode of Cybersecurity Today and Hashtag Trending for June 19, 2026.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning after security researchers uncovered the FortiBleed dataset, exposing credentials tied to approximately 74,000 Fortinet firewall and SSL VPN devices across 194 countries. Researchers found the data on an exposed threat actor server containing attack tools, victim databases, logs, and thousands of verified usernames and passwords. Analysts report that tens of thousands of those credentials may still be active.
Host Jim Love breaks down:
• What FortiBleed is and how it was discovered
• Why this affects roughly half of all internet-facing Fortinet devices
• What CISA and Fortinet are telling organizations to do immediately
• The potential risks of credential reuse and lateral movement attacks
• Practical steps security teams should take right now
The episode also includes an interview with Mike Sweeney of Silent Push on major international efforts targeting Southeast Asian scam compounds and criminal infrastructure during Operation Disruption Week.
If your organization uses Fortinet firewalls, FortiGate appliances, or SSL VPNs, this is an episode you should not miss.
#Cybersecurity #Fortinet #FortiBleed #CISA #CybersecurityToday #HashtagTrending #FortiGate #ThreatIntelligence #DataBreach #InfoSec

Cybersecurity Today host David Shipley reports that the FTC says Americans lost $3.5 billion to imposter scams in 2025—nearly triple 2020—with social media tied to $2.1 billion in losses and total fraud reaching about $16 billion, while the FBI estimates cyber-enabled losses nearer $21 billion and potentially far higher. Security researchers, including Katie Moussouris, argue the U.S. government's forced Anthropic model shutdown over an alleged guardrail bypass was hasty and largely about prompt phrasing, with Axios citing personality differences as a driver. The DOJ seized deepfake pornography sites cfake.com and sock.com under the Take It Down Act after a three-country operation involving Italy and France. Finally, Varonis details "SearchLeak" (CVE-2026-42824), a now-fixed critical Copilot attack chain enabling one-click data exfiltration via prompt injection, a sanitizer race condition, and CSP bypass through Bing.
00:00 Today's Cyber Headlines
00:29 Imposter Scams Surge
01:29 Fraud on Social Platforms
02:47 Anthropic Jailbreak Debate
04:15 Export Controls Fallout
05:05 DOJ Seizes Deepfake Sites
06:44 SearchLeak Copilot Attack
07:36 How SearchLeak Works
09:18 Why Old Bugs Return
10:08 Wrap Up and Sign Off

The U.S. government orders Anthropic to shut down foreign access to its Fable 5 and Mythos 5 AI models after the Pentagon labels the company a supply-chain risk.
David Shipley examines what may be  behind the decision and what it means for countries and businesses that depend on American AI platforms.
The FBI also disrupts Outsider Enterprise, a China-based phishing-as-a-service network linked to more than 9,000 fake websites, one million fraudulent URLs, 3.8 million stolen payment-card records and an estimated $1.9 billion in losses.
Also in this episode:
A critical Splunk vulnerability could allow an unauthenticated attacker to remotely execute code through a PostgreSQL sidecar service enabled by default in some deployments.
A former Iowa school IT worker is sentenced after retaining access for 21 months and using it to delete accounts and disrupt school systems.
And FortiWatch returns with a critical FortiSandbox command-injection vulnerability that requires no authentication.
Cybersecurity Today is hosted by David Shipley.
Chapters
00:00 Cybersecurity Today headlines
00:26 U.S. government shuts down Anthropic AI models
02:59 FBI takes down Outsider Enterprise phishing network
04:47 Critical Splunk vulnerability explained
06:31 Former school IT worker sentenced for cyberattack
08:29 FortiWatch: FortiSandbox command-injection vulnerability
10:08 What's ahead this week

Cybersecurity Today on the Weekend interviews the winning Canadian CyberTitan team ("S-ores"/a regex-based name) along with coach Phil, educator Tim, and CyberTitan manager Sheena to explain how CyberTitan (run by ICTC) connects to the international CyberPatriot program. They describe the competition mechanics—securing compromised Windows, Windows Server, and Linux virtual machines for points, plus Cisco Packet Tracer networking—and how Canadian teams compete through CyberPatriot before the top teams advance to a national CyberTitan final. Students Faye and Eric share why they joined, their learning "aha" moments in Windows tools and networking concepts, and the value of teamwork. The guests discuss teacher benefits, free training materials, building diverse participation, sponsorship challenges, and hopes for a fully Canadian program with regional events and cloud-based cyber ranges like Field Effect's.
00:00 Weekend Show Intro
01:00 Tim's CyberTitan Journey
01:46 ICTC Explained
02:08 Who Can Compete
02:42 Why CyberTitan Matters
03:22 Origins and CyberPatriot Link
04:04 How The Competition Works
05:09 Meet Team Sors
07:07 Coach Phil's Role
09:44 Why Students Join
12:08 Student Aha Moments
15:13 Community and Teacher Wins
16:34 Sheena Runs The Show
17:29 Scale and National Reach
18:51 Coast To Coast Growth
19:40 XOR Team's Home District
19:55 Teams Across Toronto
20:39 Trophies Medals Coins
21:22 Eric Why Join
23:04 Faye Encouragement Story
25:51 Teachers Start Teams
27:52 Building Girls Pipeline
30:40 Cloud Range Future
33:49 2030 Vision Wrap

Anthropic is calling for governments to have the authority to stop deployment of advanced AI systems that pose unacceptable risks. CEO Dario Amodei points to the company's Mythos cybersecurity model as proof that AI has become a matter of national and strategic consequence, warning that cyber risks may soon be followed by biological and autonomy risks.
Meanwhile, security researcher Nightmare Eclipse has released RoguePlanet, a new Windows Defender zero-day that reportedly works against fully patched Windows 10 and Windows 11 systems. The disclosure comes shortly after Microsoft said it had no intention of pursuing action against security researchers, suggesting the dispute between the company and the researcher is far from over.
And European authorities have dismantled AudiA6, a cryptocurrency laundering operation that Europol says used thousands of fraudulent exchange accounts to help obscure the proceeds of ransomware attacks and other cybercrime. Investigators linked the service to more than 15 ransomware and major cryptocurrency theft investigations worldwide.
Chapters
00:00 Top Stories Rundown
00:19 Crypto Laundering Takedown
02:02 Why Cashout Networks Matter
02:36 RoguePlanet Zero Day Drops
03:19 Microsoft Researcher Fallout
04:24 Exploit Reliability And What Next
05:37 Anthropic Wants Stop Powers
06:10 Mythos Model Cybersecurity Shock
07:37 Regulation Motives And Competition
08:37 Beyond Cyber Bio And Autonomy
09:20 Closing And Next Episodes