This briefing highlights a surge in attacker innovation from OAuth token theft via browser extensions to critical vulnerabilities in cloud, supply chain, and authentication workflows. Key incidents include a major Telus account breach, new CISA KEV additions, and sophisticated phishing and AI-driven malware adaptation. Security leaders must act swiftly on cloud account hardening, patching at-risk platforms, and adapting SOC procedures for AI-related alerts.
Active exploits and the abuse of trusted platforms highlight today’s risks, from SaaS C2 techniques to new OT vulnerabilities. Organizations must act fast on patching, monitor third-party tools, and address evolving identity and credential hygiene challenges.
Software supply chain attacks and the abuse of AI plug-in ecosystems are presenting new opportunities for credential theft and exploitation. Cloud misconfigurations and global policy moves around AI tooling underline the urgent need for improved monitoring, key management, and vendor vetting. Defenders should pay special attention to development environment plugins and open-source dependencies.