News items I have found interesting and informative.
Over the past 72 hours: AI-augmented attacker tooling (“bionic hackers”), mobile attacks accelerating with generative-AI assistance, and convergence of nation-state & financial cyber campaigns against industrial targets. A looming wave of fully automated AI attacks threatens to compress kill-chains.
Today’s briefing covers a new AI browser sidebar spoofing attack, Microsoft’s report on AI-driven cyber threats across identity and cloud, and EY’s finding that half of organizations have suffered AI security flaws.
Today’s briefing highlights how AI-generated code is undermining software security at scale, mobile device attacks are surging amid AI-powered threats, and China is expanding AI oversight for safety and data protection.
In the last 24 hours: Oracle’s October CPU ships 374 fixes (many unauth RCEs); Pwn2Own Ireland logs 34 new zero-days on Day 1; CISA flags Windows SMB Client and Kentico bugs as exploited; and a high-severity Rust async-tar flaw (“TARmageddon”) emerges. Plus, the U.N. readies a global cybercrime pact for signature.
Today’s briefing highlights identity risks from agentic AI, advanced endpoint DLP tailored for AI data flows, and Microsoft’s warning that AI-enabled threats are accelerating rapidly in the wild.
Today’s briefing examines the large-scale breach at F5 Networks exposing source code, Microsoft’s warning of AI-driven state cyber-attacks, and MI5’s strategic remarks on AI in cyber-warfare.
Today’s briefing covers Microsoft’s warning of AI-enabled state cyber escalation, a critical 9.9-severity vulnerability in ASP.NET, and the escalating F5 supply-chain breach. MI5’s spy chief also sounded caution on AI’s strategic threats.
Today’s briefing covers a new F5 breach tied to China, emerging MCP server hijack attacks, and record UK cyber incidents. Extended coverage includes California’s chatbot disclosure law and legal slowdowns in threat sharing.
Microsoft released its largest Patch Tuesday of 2025 with 167 CVE fixes (including zero-days), while Microsoft also launched ExCyTIn-Bench to test AI’s real-world security reasoning. OpenAI published its misuse disruption report, and Splunk highlighted challenges in trustworthy AI detection.
Today: researchers break AMD SEV-SNP integrity (“RMPocalypse”), Windows 10 hits end-of-support while still powering a large share of endpoints, and Visa launches a protocol to validate AI shopping agents. The UK’s NCSC warns “highly significant” incidents are up 50% year over year.