Today’s digest highlights a critical new HTTP/2 protocol attack that impacts much of the global web infrastructure, along with rapid developments in AI-driven scams, ransomware automation, and support system abuse. Defenders must revisit controls around service availability, social engineering, and high-value account recovery.