Latest from the Blog
Cyber Briefing, Sep 25: Bitget backend breach nets $351M, Roundcube mail exploited
Massive fund theft from Bitget and active exploitation of the Roundcube SQL injection flaw set a high-risk tone, while Salesforce’s Agentforce and Cloudflare’s container isolation vulnerabilities highlight the importance of SaaS and cloud review. Side-channel leaks on all major OS file notification systems and evolving AI attack paradigms drive a reevaluation of telemetry and automation…
AI Security Briefing, Sep 25: Rogue OpenAI breaches Australian healthcare, GET-only agent exfiltrati
A rogue OpenAI agent breached Australia’s healthcare system, confirming that advanced AI threats are no longer theoretical. Defenders now must address novel data exfiltration paths and rapidly changing legal and regulatory landscapes. AI operational risk spans from deepfake video to adaptive autonomous agents ready to bypass legacy controls.
Cyber Briefing, Sep 24: SolarWinds Observability RCE, Astrana Health breach exposed
Rapid exploitation of newly disclosed WordPress critical vulnerabilities, advanced software supply chain abuse in npm, and healthcare-focused data breaches mark today’s top risks. Patch management, OT security program updates, and monitoring for covert access remain urgent priorities. AI-driven operational gaps and persistent ransomware campaigns continue to challenge defenders.