Critical zero-day vulnerabilities in Cisco Secure Email Gateway and GitLab are under active exploitation, increasing risk to mail and DevOps infrastructures. New malware campaigns targeting browsers, Telegram, and multi-platform IoT protocols further expand the threat surface, while opportunistic attacks leverage web and plugin flaws for initial compromise. Defenders must prioritize emergency patching, threat hunting, and advanced monitoring across development, productivity, and cloud environments.
Email Security
AI Security Daily Briefing — January 20, 2026
New reporting shows how AI assistants can be manipulated through trusted enterprise workflows such as calendar invites and health data integrations, increasing the risk of indirect prompt injection and sensitive data exposure. Adjacent cybersecurity developments reinforce that email infrastructure weaknesses, public exploit code, and geopolitical pressures remain key pathways into AI-enabled environments.
AI Security Daily Briefing — December 22, 2025
A new “Lies-in-the-Loop” attack pattern exposes risks in AI safety workflows, Ciphero raises funding for runtime AI security, Anubis launches an open-source AI firewall to block scraping, and Darktrace enhances defenses against AI-driven social engineering.
AI-Powered Business Email Compromise — Operational Playbook for Defense
AI-powered Business Email Compromise uses deepfakes, voice clones, and personalized emails to deceive financial teams. This playbook explores real-world incidents and outlines layered defenses to verify identities and stop AI-driven fraud.
AI-Enhanced Phishing — Operational Playbook for Defense
AI is making phishing more convincing than ever, from flawless emails to deepfake calls. This playbook explains how attacks work, why they succeed, and how to defend with layered strategies.
AI-Powered Business Email Compromise — Operational Playbook for Defense
AI is transforming Business Email Compromise into a more convincing and costly threat. This playbook shows how attacks work, why they succeed, and what defenders must do to prevent fraud and data loss.