Technology

CVE-2026-33825, a local privilege-escalation vulnerability in the Windows Defender antimalware engine patched on April 14, 2026, was confirmed by CISA on June 30 as actively used in ransomware campaigns, with no specific group officially named. The flaw affects both enterprise and consumer Defender deployments equally because both rely on the same MsMpEng.exe process, though enterprise tenants receive the platform update more consistently. A follow-on technique called RoguePlanet, publicly disclosed by Picus Security in June 2026, bypasses the April fix on fully patched Windows 10 and 11 systems, meaning the workaround menu of Tamper Protection enforcement, application control, and EDR detection remains necessary even after patching.

Between late May and early June 2026, an unidentified threat actor compromised HSIN servers and a SharePoint collaboration system used by federal, state, local, tribal, territorial, international, and private-sector partners to share sensitive but unclassified homeland security information across all 16 critical infrastructure sectors. DHS confirmed the breach on July 1-2, stating no classified networks were affected and that the system remains operational, while the Office of Intelligence and Analysis leads a forensic investigation with no public attribution of the attacker. Senate Intelligence Committee Ranking Member Mark Warner warned the exposed content is highly sensitive and risks national security; mandatory CIRCIA incident reporting requirements do not yet apply because the final rule has not taken effect, and prior OIG audits had documented persistent cybersecurity deficiencies and usability gaps across DHS systems.

US Commerce Secretary Howard Lutnick met with ASML CEO Christophe Fouquet in June 2026 to present evidence that EUV-related components and transport equipment may have reached China in violation of export controls, though no formal enforcement action against ASML has been filed. ASML categorically denies ever shipping an EUV machine or any component designed for one to China, citing physical tracking of every system and the absence of EUV-trained personnel in the country. The dispute matters because a successfully prosecuted diversion case could jeopardize ASML's remaining permitted China sales, which still account for an estimated 20 percent of its 2026 revenue.