Cyber Security News

Hacking Editorial Brief — June 25, 2026

Scattered Spider Members Plead Guilty to TfL and U.S. Healthcare Breaches

Two British hackers affiliated with the Scattered Spider threat group have pleaded guilty to cyberattacks on Transport for London (TfL), with one member also admitting to breaching two U.S. healthcare organizations—SSM Health Care and Sutter Health. The guilty pleas represent the first confirmed prosecutions of Scattered Spider members, a group known for sophisticated social engineering tactics and high-profile intrusions targeting critical infrastructure and healthcare systems. The TfL attack disrupted London's public transportation network, while the healthcare breaches compromised patient data across multiple facilities. Separately, Madison Square Garden suffered a significant breach by the ShinyHunters threat group, resulting in the leak of facial recognition records tied to millions of venue visitors, including celebrities and customers. The compromise reportedly began with a single social engineering attack that granted initial access to MSG's biometric database systems, validating longstanding warnings about the security risks of centralized biometric data collection.

New iPhone Boot Exploit and FIFA World Cup Phishing Campaign

Security researchers disclosed Usbliter8, a USB-based exploit chain targeting Apple devices with A12 and A13 chips, including iPhone XS, XR, 11, and Apple Watch S4-S5 models. The exploit bypasses Apple's boot security defenses by chaining controller and firmware vulnerabilities, potentially affecting millions of devices still in active use. Meanwhile, Chinese-origin threat actors have deployed sophisticated phishing infrastructure targeting FIFA World Cup 2026 attendees, using pixel-perfect clones of legitimate ticketing sites and man-in-the-middle attacks to bypass two-factor authentication. The campaign includes card-skimming capabilities designed to harvest payment credentials from users attempting to purchase World Cup tickets or merchandise through fraudulent sites that mirror official FIFA platforms.

Sources: HIPAA Journal · Yahoo · Inc · SecurityWeek · CloudSEK