SSF Cyber Defence Digest
Issue Date: 7 June 2026Reporting Period: 7 May 2026 – 7 June 2026
Cyber threat alerts for security professionals to assess emerging risks, evaluate potential exposure, and investigate further using official advisories and trusted technical sources.
⚠ Microsoft June Patch Tuesday Addresses Over 200 Vulnerabilities
Vulnerability Level: 🔴 CriticalIncident Summary: Microsoft released security updates addressing more than 200 vulnerabilities, including publicly disclosed zero-days and numerous critical remote code execution flaws.
Attack Vector: Multiple CVEs | Remote Code Execution | Privilege Escalation | Information Disclosure
Potential Impact: Enterprise compromise | Privilege escalation | Remote system access | Credential theft
Defence: Prioritise Windows, Active Directory, Office and internet-facing systems during patch deployment.
⚠ Google Chrome Zero-Day Actively Exploited
Vulnerability Level: 🔴 Critical — Active ExploitationIncident Summary: Google released an emergency update addressing an actively exploited Chrome zero-day affecting the V8 JavaScript engine.
Attack Vector: CVE-2026-11645 | Crafted HTML | Browser Exploitation
Potential Impact: Remote code execution | Endpoint compromise | Browser sandbox attack
Defence: Verify Chrome and Chromium-based browsers are updated across all managed endpoints.
⚠ Cisco Catalyst SD-WAN Manager Vulnerability Added to KEV
Vulnerability Level: 🔴 Critical — Active ExploitationIncident Summary: CISA added a Cisco Catalyst SD-WAN Manager vulnerability to the Known Exploited Vulnerabilities catalogue following confirmed exploitation.
Attack Vector: CVE-2026-20245 | Command Execution | SD-WAN Management Platform
Potential Impact: Root command execution | Network infrastructure compromise | Administrative takeover
Defence: Apply Cisco security updates immediately and restrict management access to trusted administrators.
⚠ SAP June Security Notes Address Multiple Critical Vulnerabilities
Vulnerability Level: 🔴 CriticalIncident Summary: SAP released June Security Notes resolving several critical vulnerabilities affecting enterprise business applications.
Attack Vector: Multiple CVEs | Remote Code Execution | Enterprise Applications
Potential Impact: Business application compromise | Data exposure | Service disruption
Defence: Review applicable SAP Security Notes and prioritise internet-facing SAP systems.
⚠ Veeam Backup & Replication Remote Code Execution
Vulnerability Level: 🔴 CriticalIncident Summary: Veeam released security updates for a critical Backup & Replication vulnerability affecting domain-joined backup servers.
Attack Vector: Remote Code Execution | Backup Infrastructure
Potential Impact: Backup server compromise | Ransomware propagation | Administrative access
Defence: Upgrade Veeam Backup & Replication immediately and review privileged access to backup infrastructure.