Nick Andersen appointed to CISA leadership role Summary The Cybersecurity and Infrastructure Security Agency (CISA) has named Nicholas Andersen as its executive assistant director for cybersecurity, with Andersen starting in…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania Attorney General Dave Sunday confirmed that his office has restored its website, phone lines and email…
Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks has told customers that stolen OAuth credentials — taken from the Salesloft Drift breach — were used to…
Summary Zscaler has confirmed that limited Salesforce data was exposed after attackers stole OAuth tokens from Salesloft’s Drift integration with Salesforce. The incident, linked to a suspected ShinyHunters (UNC6395) operation,…
How big will this Drift get? Cloudflare cops to Salesloft Drift breach Summary Cloudflare has confirmed that its Salesforce instance was accessed after the wider Salesloft “Drift” compromise. The company…
Who watches the watchmen? Surveillanceware firms make bank, avoid oversight Summary A new industry analysis by Sekoia, reported by The Register, shows commercial surveillanceware firms are booming: prices for infections…
Summary The White House under President Trump has lifted a Biden-era pause on Immigration and Customs Enforcement (ICE) buying spyware from Paragon Solutions. The Biden administration froze the contract in…
What Every Argument About Sideloading Gets Wrong Key points • Hugo Tunius argues the familiar claim “I should be able to run whatever code I want on hardware I own”…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary Ransomware group LunaLock claims to have breached Artists&Clients, stolen and encrypted the site’s data,…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an AI-driven pipeline (dubbed Auto Exploit) that uses LLM prompts, CVE advisories and open-source patch diffs to…
