June 2026 TRU Intelligence Briefing On-Demand

Watch eSentire’s Threat Response Unit (TRU) as they share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the June Threat Intelligence Briefing, TRU reviewed:

• Threat Landscape: This section provided a brief update on cyberattacks related to the 2026 FIFA World Cup, as well as recent threats observed by TRU, including Remus Stealer, Creal Stealer, and NimbusRAT. Additionally, TRU covered notable vulnerabilities: Cisco Catalyst SD-WAN Zero-Day Vulnerability (CVE-2026-20182), Palo Alto PAN-OS Zero-Day Vulnerability (CVE-2026-0300), and Windows MiniPlasma Zero-Day Vulnerability (CVE-2020-17103).
• The Device Code Phishing Surge: Multiple threat groups have pivoted to device code phishing, a technique that bypasses MFA by tricking users into authorizing the attacker's session against real Microsoft login pages, generating no lookalike domain and no anomalous sign-in telemetry. TRU covered the pivot across these operator and the surge eSentire observed across customer environments
• Detection and Defense for Device Code Phishing: TRU broke down how the device code phishing attack unfolds step by step, share observations, and walked through detection coverage and defensive recommendations.

This webinar also included a live Q&A.