Januscape VM Escape 🔴, DHS HSIN Breach 🏛️, UNK_MassTraction Roundcube Chain 📧, EtherRAT Teams Calls 📞

The defining story is the Januscape KVM vulnerability, CVE-2026-53359. The use-after-free sits in shadow MMU code shared by Intel and AMD, the first publicly known KVM exploit triggerable on both CPU families, dormant for 16 years. Guest root can corrupt host shadow page state, panic the host and deny service to every tenant, or execute code with host root privileges. CVE-2026-53359 "Januscape", 16-Year-Old Linux KVM Flaw Enables VM Escape on Intel and AMD Systems is the patch priority: mainline fixed it on June 19, so providers should be patched while enterprise fleets still need verification.

The other headline is DHS Confirms Breach of Homeland Security Information Network (HSIN), Undetected for ~6 Weeks, World Cup 2026 Security Docs Exposed. The intrusion hit HSIN servers and a SharePoint instance in late May and early June, went undetected for five to six weeks, and coincides with peak security preparation for the 2026 FIFA World Cup, for which HSIN is the primary coordination platform across 16 host cities. Partners should treat shared materials as compromised and rotate credentials.

The remaining items cluster around initial access and identity. UNK_MassTraction is chaining two Roundcube vulnerabilities against US and Canadian university physics departments, and a Teams voice-call campaign impersonating IT support delivers EtherRAT, both reminders that phone-based social engineering bypasses email defenses.

Watchlist: verify KVM host kernels are at the June 19 fix, rotate credentials for HSIN-connected accounts, patch Roundcube against CVE-2024-42009 and CVE-2025-49113, and restrict cross-tenant Teams calling.