Microsoft drops a single-day record 206 security patches with 39 critical flaws, while The Gentlemen ransomware group confirms 478 victims and a new MaaS tool called OnyxC2 evades detection across major scanning platforms. Today's briefing covers the biggest cybersecurity stories shaping enterprise defenses right now.
Audio is available on Spreaker — see link below.
A ransomware empire built on a forty-eight thousand dollar betrayal. That's the story behind The Gentlemen, a new Russian-linked operation that's now confirmed four hundred and seventy-eight victims and is actively recruiting affiliates with a ninety percent profit share, one of the most aggressive splits in the ransomware-as-a-service market.
The operational structure is worth paying attention to. The Gentlemen runs a hardened affiliate panel with a strict one-gigabyte data exfiltration requirement before access is granted, ostensibly to screen out law enforcement.
Shift to Microsoft, and the picture gets larger. On June tenth, Microsoft released two hundred and six security patches, a single-day record.
Anthropic's research puts the numbers in stark terms. Modern AI models can identify over ten thousand critical flaws per month.
On the encryption front, Microsoft's June patch batch also addressed three separate BitLocker bypass vulnerabilities. Each requires physical access to exploit, which limits exposure in well-controlled environments.
What to watch next: patch prioritization on the three zero-days from June tenth should be immediate. The Gentlemen's affiliate recruitment trajectory will tell us whether this group consolidates into a top-tier operation or stays mid-tier.
Chapter summary auto-generated from the verified script. Listen to the full episode for the complete content.