Cyber Briefing: 2026.06.19
Kodak battles a 2.2-million-record extortion threat while regulators hit retail checkout traps with massive six-figure penalties.
Welcome to Cyber Briefing, your daily source for all things cybersecurity. We bring you the latest advisories, alerts, incidents, and news every weekday.
The global tech and cyber landscape saw significant developments across software maintenance, enterprise security, and consumer protection. Microsoft successfully resolved a frustrating issue affecting Windows Server 2016 administrators, fixing a bug where June 2026 security updates would fail with a “file not found” error if the previous month’s patch hadn’t been installed. Meanwhile, Eastman Kodak confirmed it suffered a security breach after the extortion group ShinyHunters threatened to leak over 2.2 million customer and corporate records. While Kodak states the incident is contained with no operational impact, affected customers are being urged to update passwords and monitor for phishing attempts. On the regulatory front, the UK’s Competition and Markets Authority (CMA) hit retailer Marks Electrical with a £720,000 fine for illegally using automatic opt-ins to charge nearly 40,000 customers for unwanted appliance services.
Simultaneously, major strides are being made in authentication technology and cloud infrastructure. Google updated its reCAPTCHA platform within Google Cloud Fraud Defense, introducing hand gesture verification as a new challenge-based tool to help organizations separate human users from automated bots during logins and checkouts. In the infrastructure space, cloud provider Render hosted its inaugural “Localhost” developer conference in San Francisco. Targeting AI-driven applications, Render’s leadership advocated for “application-defined compute,” arguing that traditional serverless frameworks are fundamentally unequipped to handle modern AI workloads that require dynamic, runtime infrastructure provisioning.
Listen to our podcast here ⏬
⚡THREAT LANDSCAPE
Microsoft fixes Windows Server 2016 update failures
Microsoft resolved a known issue causing June 2026 security updates to fail on Windows Server 2016 systems that had not installed the previous month’s update. Affected administrators encountered 0x80070002 or FILE_NOT_FOUND errors when attempting to install KB5094122 without first deploying May’s KB5087537 security update. Microsoft confirmed the issue is now fixed and devices should no longer experience installation failures. Read More
🚨INCIDENTS & REAL-WORLD IMPACT
Kodak confirms breach; ShinyHunters leak deadline passes
Eastman Kodak confirmed a security breach after extortion group ShinyHunters claimed to have stolen over 2.2 million records containing customer personal information and internal corporate data, threatening to leak the data after a June 18 deadline. Kodak stated the incident was limited in scope and contained, with no threat to systems or operations, and has engaged external cybersecurity experts and law enforcement. Affected customers should change passwords, enable multi-factor authentication, and consider credit freezes while monitoring for phishing attempts that often follow breach announcements. Read More
🔓 EXECUTIVE RISK & CYBERNOMICS
Google reCAPTCHA adds hand gesture verification
Google has added hand gesture verification as a new authentication method for its reCAPTCHA service, which is part of Google Cloud Fraud Defense. The system uses risk analysis and challenge-based verification to distinguish human users from automated bots on login pages, registration forms, password resets, and checkout systems. Organizations using reCAPTCHA can now deploy this gesture-based verification alongside existing methods to prevent fraud and abuse. Read More
🛡️ POLICY, REGULATION & LEGAL SIGNALS
CMA fines Marks Electrical £720k for unauthorized opt-ins
The UK Competition and Markets Authority (CMA) fined Marks Electrical £720,000 for automatically enrolling customers in paid services without consent. Nearly 40,000 customers will receive refunds averaging £15 each (totaling approximately £600,000) after being charged for appliance recycling and packaging removal services they did not explicitly agree to purchase. The retailer admitted breaking consumer protection laws that prohibit pre-ticked boxes or automatic opt-ins for paid extras, and the fine was reduced 40% due to early settlement and cooperation. Read More
💻 CAREER ENABLEMENT
Render hosts Localhost dev conference on AI-native infrastructure
Cloud hosting provider Render held its first developer conference, Localhost, in San Francisco to promote its infrastructure approach for AI-driven applications. The company claims 400,000 developers join monthly and handle 200 billion requests per month, positioning itself as an alternative to AWS, Azure, and Google Cloud for dynamic AI workloads. Render’s CEO argues traditional serverless platforms cannot handle AI applications that provision their own infrastructure at runtime, proposing “application-defined compute” as a solution. Read More
Copyright © 2026 CyberMaterial. All Rights Reserved.
Follow CyberMaterial on:
Substack, LinkedIn, Twitter, Reddit, Instagram, Facebook, YouTube, and Medium