Technology

ThreatLocker Highlights Key Cyber Threat Activity and Research from June 2026

Published

4 months ago

July 6, 2026

Recap includes AI cyber risk, software supply chain attacks, SaaS trust failures, zero-day exploits, and community support

ORLANDO, Fla., July 6, 2026 /PRNewswire/ — ThreatLocker today released highlights of the company’s cybersecurity research, threat analysis, industry commentary, and community outreach from June.

“AI driven cyber threats continued to generate significant attention in June, but most of the attacks we looked at came back to the same issue: trusted access being misused,” said Danny Jenkins, CEO & Co-founder of ThreatLocker. “Attackers do not need everything to be vulnerable. They need one trusted path that gives them room to maneuver.”

Cybersecurity Trends and Industry Commentary

ThreatLocker examined how frontier AI models such as Claude Mythos and Claude Fable 5 are changing the way vulnerabilities are discovered and weaponized. The company cautioned that AI should not be treated as a separate category of risk; it is another way attackers can abuse trusted access. Five Eyes guidance on agentic AI threats was also reviewed, which pointed to Zero Trust as a practical way to place boundaries around AI systems and limit what attacks built with AI can access or execute.

Jenkins also spoke publicly about the limitations of restricting access to frontier AI models, noting that cybercriminals and foreign adversaries are unlikely to be stopped by limits on one model when stolen accounts, foreign models, and open-weight tools remain available. Additionally explored was how China’s GLM-5.2 shows how open-source AI is changing the cyber threat landscape, and how the LLMShare campaign exploits ChatGPT to deliver malware.

ThreatLocker Analysis of Supply Chain and Third-Party Risk

Researchers from the company continued to analyze supply chain attacks and third-party risk, with several June incidents showing how trusted repositories, software, and SaaS integrations can be abused.

The team examined how Red Hat npm packages were compromised with a credential-stealing worm, and how the Miasma worm targeted Microsoft and compromised 73 GitHub repositories. Both incidents highlighted the risks facing development environments where trusted packages can become part of the attack path.

ThreatLocker also analyzed the Mastra supply chain attack, including why the supply chain attack wasn’t about AI, but rather access, permissions, and account hygiene.

Additional analysis covered the Klue SaaS supply chain compromise, where attackers reportedly used long-lived OAuth tokens tied to Klue’s integration infrastructure to reach customer environments, including Salesforce. In a follow-up piece on what the Klue breach reveals about SaaS trust, ThreatLocker noted that the incident was not about a Salesforce vulnerability, but about the reach attackers can gain when a trusted third-party integration is abused.

Understanding New Exploits and Patch Pressure

The Threat Intelligence also tracked new exploit activity throughout June. The team was the first to validate that RoguePlanet, a Microsoft Defender zero-day, granted SYSTEM privileges on fully patched systems. The company also analyzed GreatXML and the WinRE trust boundary behind BitLocker, and continued examining what YellowKey and GreenPlasma reveal about trusting native Windows security.

These findings showed that patching remains essential, but it cannot be the only line of defense. As a result, ThreatLocker published guidance on balancing security, stability, and speed in patch management, emphasizing the need for controls that limit unauthorized execution and behavior while organizations test and deploy updates.

Education and Community

As part of its ongoing commitment to cybersecurity education, ThreatLocker hosted the webinar “MFA is not enough: How to stop phishing and session hijacking attacks”. The session explored how attackers steal credentials, hijack sessions, and bypass traditional access controls, and why organizations need to verify devices in addition to users, and limit access after login.

The organization also participated as a vendor at RejectionCon, where vendor fees helped support The Rural Tech Fund, generating an $80,000 donation to help expand access to technology education for students in rural classrooms across the United States.

About ThreatLocker:

ThreatLocker is a global cybersecurity leader that stops cyberattacks before they happen. The company’s Zero Trust Platform prevents breaches from both known and unknown threats by allowing only explicitly trusted software and activity across endpoints, networks, and cloud systems. Built to deploy quickly and scale across complex environments, the platform reduces operational overhead while keeping business running uninterrupted. Headquartered in Orlando, Florida, with offices in Dublin, Dubai, and Brisbane, ThreatLocker protects over 70,000 organizations worldwide.

Contact:press@threatlocker.com, 321-515-3813

View original content to download multimedia:https://www.prnewswire.com/news-releases/threatlocker-highlights-key-cyber-threat-activity-and-research-from-june-2026-302818685.html

SOURCE ThreatLocker, Inc.

Technology

Club Offers for Travel Enthusiasts in Canada

Published

34 minutes ago

October 23, 2026

TORONTO, Oct 23, 2026 /PRNewswire/ — Travelzoo® (NASDAQ: TZOO), the club for travel enthusiasts, announces three of many new Club Offers for Club Members in Canada.

Rigorously vetted and negotiated for us travel enthusiasts:

$799—COSTA RICA WEEK WITH FLIGHTS & CAR
We think fall is an ideal time to visit Costa Rica; the scenery is lush and the crowds are gone. Drive between volcanic Arenal and the idyllic beaches of Tamarindo on this seven-night trip. Since it’s not as busy, we were able to negotiate a price that saves members up to $648 on departures through mid-December.

$899—BARCELONA: 5 NIGHTS WITH FLIGHTS
Explore Barcelona’s world-class museums and architectural masterpieces in the quieter winter months to pack more into your trip. You won’t waste hours in lines and can access top restaurants that are fully booked in summer. We save $300 on travel this January and February, when temperatures are still spring-like. Roundtrip flights from Toronto, hotel and daily breakfast are included.

$999—ST. KITTS GETAWAY FOR 2, REG. $2083
Most visitors to St. Kitts book months in advance, but when we pointed out that travel enthusiasts are more spontaneous, this resort gave us a terrific rate for stays this November and December. Spend four nights in Frigate Bay and get an upgraded Oceanview room, too.

Are you a travel enthusiast? Join the club today: https://travelzoo.com

Who are we?
We, Travelzoo®, are the club for travel enthusiasts. We reach 30 million travellers. Club Members receive Club Offers negotiated and rigorously vetted by our deal experts around the globe. Our relationships with thousands of top travel companies give us access to irresistible deals. Our club and its benefits are built around the lifestyle of a modern travel enthusiast.

Media Contact:
Amanda Ieraci – Toronto
+1 437 866 8540
aieraci@travelzoo.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/club-offers-for-travel-enthusiasts-in-canada-302918543.html

SOURCE Travelzoo

Technology

Howard Hughes Holdings Set to Join S&P SmallCap 600

Published

2 hours ago

October 23, 2026

NEW YORK, Oct. 23, 2026 /PRNewswire/ — Howard Hughes Holdings Inc. (NYSE: HHH) will replace Arcosa Inc. (NYSE: ACA) in the S&P SmallCap 600 effective prior to the opening of trading on Wednesday, October 28. S&P 500 constituent CRH plc (NYSE: CRH) has acquired Arcosa in a deal that closed today, October 23.

Following is a summary of the changes that will take place prior to the open of trading on the effective date:

Effective Date

Index Name

Action

Company Name

Ticker

GICS Sector

October 28, 2026

S&P SmallCap 600

Addition

Howard Hughes Holdings

HHH

Real Estate

October 28, 2026

S&P SmallCap 600

Deletion

Arcosa

ACA

Industrials

ABOUT S&P DOW JONES INDICES

S&P Dow Jones Indices is the largest global resource for essential index-based concepts, data and research, and home to iconic financial market indicators, such as the S&P 500® and the Dow Jones Industrial Average®. More assets are invested in products based on our indices than products based on indices from any other provider in the world. Since Charles Dow invented the first index in 1884, S&P DJI has been innovating and developing indices across the spectrum of asset classes helping to define the way investors measure and trade the markets.

S&P Dow Jones Indices is a division of S&P Global (NYSE: SPGI), which provides essential intelligence for individuals, companies, and governments to make decisions with confidence. For more information, visit www.spglobal.com/spdji/en/.

FOR MORE INFORMATION:

S&P Dow Jones Indices
index_services@spglobal.com

Media Inquiries
spdji.comms@spglobal.com

View original content:https://www.prnewswire.com/news-releases/howard-hughes-holdings-set-to-join-sp-smallcap-600-302918511.html

SOURCE S&P Dow Jones Indices

Technology

Chelsea FC announces multi-year sleeve partnership with Sokin, the business payments and FX platform

Published

3 hours ago

October 23, 2026

Chelsea FC name fast-growing fintech platform as Principal Partner

LONDON, Oct. 23, 2026 /PRNewswire/ — Chelsea Football Club has today announced a multi-year partnership with Sokin, the embedded finance and payments company used by businesses worldwide. Sokin will be named a Principal Partner and Official Business Payments and FX Partner of Chelsea FC and Chelsea FC Women.

As a Principal Partner, Sokin will be represented on the sleeves of the Chelsea FC men’s, women’s and academy home, away, and third kits from the 2026/27 season.

The partnership brings together two ambitious London-headquartered organisations with worldwide reach – a club with millions of fans across the world and a fintech platform through which businesses move more than $11 billion a year. A club of Chelsea’s scale works in many currencies every day, with partners, competitions and supporters around the world, and needs a financial partner built to handle that.

Sokin gives finance teams business payments, multi-currency accounts, foreign exchange, checkout and treasury in one place, so they spend less time juggling banks and providers and keep more of what they move.

As Official Business Payments and FX Partner, Sokin will simplify how Chelsea FC sends, receives and manages money in the currencies the club operates in.

The Sokin logo will feature on the sleeve of the Chelsea shirt for the first time [when the men’s team host Tottenham Hotspur at Stamford Bridge on Saturday 24th October.]

Jason Gannon, President at Chelsea FC said:

“At Chelsea, we seek to partner with organisations that share our ambition and innovative mindset. Sokin’s expertise in business payments, and their focus on making both simpler for the businesses they serve, makes them a natural fit for the Club. We are pleased to welcome Sokin to the Chelsea family and look forward to working together in the years ahead.”

Vroon Modgill, CEO and founder at Sokin said:

“Chelsea plays on the biggest stage in world football, and its business runs in dozens of currencies. Sokin was built for that with regulated, multi-currency payments and foreign exchange for organisations that operate internationally. We’re proud to be the platform behind the business payments and FX of one of the most iconic teams in football. Sokin’s platform serves businesses in more than 170 countries. We’re thrilled to be partners for the season ahead. An organisation as sophisticated as Chelsea doesn’t leave its finances to chance.”

About Sokin

Sokin is the financial layer global business runs on. Businesses can transact, convert and hold money in 70+ currencies across 170+ countries. Some businesses use Sokin to manage global finance in-house. Others build it into their products to power financial experiences for their customers. Businesses move more than $9 billion a year on licenses Sokin holds in 36+ countries and infrastructure Sokin owns. Founded in 2019, Sokin has raised over $100 million from investors including Morgan Stanley Expansion Capital and Prysm Capital.

About Chelsea Football Club

Chelsea Football Club is one of the biggest, most successful football clubs globally and our men’s team are reigning world champions, having won the four-yearly FIFA Club World Cup in 2025. Our women’s team, Chelsea Women, are also multiple trophy winners.

Founded in 1905, Chelsea is London’s most central football club, based at the iconic 40,000-capacity Stamford Bridge stadium. Nicknamed the Blues, the club lifted the Champions League for the first time in 2012 and domestically has won the Premier League five times, the FA Cup eight times, the Football League Cup five times and the Football League Championship once, in 1955.

The Chelsea Women’s team have enjoyed a huge amount of success and in 2025 won the FA Women’s Super League for a sixth consecutive year and the eighth time overall. The Women’s FA Cup has been won on six occasions. We have also captured the FA Women’s League Cup four times as well as reaching the UEFA Women’s Champions League final in 2021. In two seasons, 2020/21 and 2024/25, a domestic treble of trophies was secured.

The Chelsea Foundation boasts one of the most extensive community initiatives in sport, helping to improve the lives of children and young people all over the world.

Media Contacts:

Taina Biggs
taina.biggs@sokin.com

Nerissa Chesterfield
nerissa.chesterfield@chelseafc.com

View original content to download multimedia:https://www.prnewswire.co.uk/news-releases/chelsea-fc-announces-multi-year-sleeve-partnership-with-sokin-the-business-payments-and-fx-platform-302918466.html