The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually Enforcing The AI Act This Week

In this issue:

The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually Enforcing The AI Act This Week

In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face

In this issue:

In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breach Hugging Face

AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now

In this issue:

AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now

UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected Waymo Robotaxi Snitches on Teens’ Boozy Joyride Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins

In this issue:

UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected Waymo Robotaxi Snitches on Teens’ Boozy Joyride Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says Spoofed OAuth IDs Let Hackers Quietly Test Millions of Microsoft Entra Logins

Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer Have you checked out DomainHelp lately?

In this issue:

Ottawa Weighed Suing Citizens Over “Misleading” Social Media Posts Canada’s Spy Agency Goes on Offense: CSE Details Hacks on Traffickers, Extremists, Ransomware Gangs GitHub AI Agents Can Be Tricked Into Leaking Private Repo Data North Korean Hackers Hit Open Source Supply Chain in “PolinRider” Campaign New “Armored Likho” Threat Actor Targets Government and Energy Sectors with AI-Obfuscated Stealer Have you checked out DomainHelp lately?

Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit

In this issue:

Canada’s New Cyber Law Lets a Minister Cut Your Phone Off — No WarrantRequired CISA Confirms Ransomware Exploitation of Unpatched Microsoft DefenderFlaw NAIC Cyberattack Exposes Insurer Credit Rating Data via OraclePeopleSoft Zero-Day Anthropic Brings Claude Fable 5 Back Online After Export ControlStandoff New “ARToken” Phishing Service Exposed as Customer of MFA-Bypassing EvilTokens Kit

House Leaders Strike Deal on KIDS Act—Minus Key Safety Provision Zombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link Devices Klue Breach Traced to Forgotten 2022 Credential Squidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked Passwords New “Crypto Clipper” Worm Hijacks Crypto Wallets via USB Drives

In this issue:

House Leaders Strike Deal on KIDS Act—Minus Key Safety Provision Zombie Routers: AryStinger Botnet Hijacks 4,300+ Outdated D-Link Devices Klue Breach Traced to Forgotten 2022 Credential Squidbleed: 29-Year-Old Bug in Popular Proxy Server Leaked Passwords New “Crypto Clipper” Worm Hijacks Crypto Wallets via USB Drives

Canada’s New Bill Would Trade Online Anonymity for “Child Safety” US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak Claim Massive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other Domains AI Sovereignty Fears Boil Over at G7 The Backdoor That Outlived the Takedown

In this issue:

Canada’s New Bill Would Trade Online Anonymity for “Child Safety” US Forces Anthropic to Pull Fable 5, Mythos 5 Over Disputed Jailbreak Claim Massive Fortinet Firewall Breach Exposes Credentials at Samsung, FedEx, Oracle, and 21,000+ Other Domains AI Sovereignty Fears Boil Over at G7 The Backdoor That Outlived the Takedown

Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders Disgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets Defender Meta Bug Exposes 20,000+ Instagram Accounts Vidar Malware Spreads Via Fake Tutorial Videos on TikTok and Instagram Red Hat npm Packages Backdoored in GitHub Account Compromise

In this issue:

Anthropic Splits Its Most Capable Model in Two — One for the Public, One for Cyber Defenders Disgruntled Ex-Microsoft Researcher Drops Seventh Zero-Day, Targets Defender Meta Bug Exposes 20,000+ Instagram Accounts Vidar Malware Spreads Via Fake Tutorial Videos on TikTok and Instagram Red Hat npm Packages Backdoored in GitHub Account Compromise

Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts Red Hat npm Channel Hijacked to Spread Credential-Stealing Worm AI-Powered Malware Lab Targets Major EDR Platforms IMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware Group Microsoft Backs Down After Security Researcher Backlash

In this issue:

Instagram’s AI Chatbot Exploited to Hijack High-Profile Accounts Red Hat npm Channel Hijacked to Spread Credential-Stealing Worm AI-Powered Malware Lab Targets Major EDR Platforms IMA Diligence Services Data Breach Exposes 525,000+ Victims to Genesis Ransomware Group Microsoft Backs Down After Security Researcher Backlash