GitHub Copilot ‘CamoLeak’ AI Attack Exfiltrates Data Summary Researcher Omer Mayraz (Legit Security) demonstrated a proof-of-concept called “CamoLeak” that can coax GitHub Copilot into leaking small but sensitive items —…
SonicWall: 100% of Firewall Backups Were Breached Summary SonicWall has updated its incident disclosure to say that an earlier-reported cloud backup breach affected firewall configuration backup files for every customer…
Take Note: Cyber-Risks With AI Notetakers Summary AI notetaking tools — whether built into meeting platforms or run as third-party apps like Granola or Limitless — are now common in…
Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks Summary Researchers from Cisco Talos observed China-based threat group Storm-2603 (also tracked as Gold Salem) abusing the open-source DFIR tool Velociraptor…
Deepfake Awareness High at Orgs, But Cyber Defences Badly Lag Summary Organisations are increasingly encountering AI-augmented deepfake attacks — from AI-crafted phishing emails to audio and video impersonations — yet…
Microsoft Drops Terrifyingly Large October Patch Update Summary Microsoft’s October Patch Tuesday is enormous: 175 CVEs were patched, including multiple zero-days that are already being exploited and several flaws Microsoft…
China’s Flax Typhoon Turns Geo-Mapping Server into a Backdoor Summary Researchers at Reliaquest uncovered a sustained compromise by a Chinese APT group tracked as Flax Typhoon that turned a public-facing…
Financial, Other Industries Urged to Prepare for Quantum Computers Summary Experts and industry bodies, led by FS-ISAC, warn that financial institutions, government agencies and other organisations holding long-lived sensitive data…
Critical infrastructure CISOs Can’t Ignore ‘Back-Office Clutter’ Data Summary Critical infrastructure organisations have long hardened OT and ICS — the obvious crown jewels. But Joe Pearce argues the biggest, quietly…
1Password Addresses Critical AI Browser Agent Security Gap Summary 1Password has introduced Secure Agentic Autofill, an integration with Browserbase designed to let AI-powered browser agents authenticate without exposing user credentials.…
