Security
Vulnerabilities in refrigeration systems highlight the chilling fragility of food supply chains
Researchers warn that multiple flaws can "combine to create powerful attack chains against internet-accessible cyber-physical systems.”
Machine
Security
North Korea's Lazarus Group hits defense sector with zero-day hidden in fake "dream job" offers
"What makes this campaign dangerous is the weaving of legitimate, trusted infrastructure into every stage of the attack."
Security
Gunra ransomware gang is targeting critical infrastructure worldwide, CISA warns
"Threat actors have seen how exposed and neglected these targets are - so are swarming towards them."
Critical Systems
Cloudflare shows how a single failure can wipe an entire country off the internet
"These incidents underscore the fragility of internet infrastructure, but also the remarkable stability global systems maintain when operating normally."
Security
Russian "Laundry Bear" threat actor rinses Western victims with zero-click exploit
Intelligence agencies get lathered up about a Moscow-linked espionage group also tracked as Void Blizzard.
Security
Hollowgraph malware turns Microsoft 365 calendars into secret-stealing "dead drop"
Command-and-control tool targets Israeli entities and shares technical similarities with a backdoor previously linked to an Iranian threat actor.
The DragonForce ransomware gang just gave us another huge reason to hate Microsoft Teams
Hackers piggybacked on the deeply unpopular communications app to quietly siphon data out of a "major US services firm".
AI
Software complexity is outpacing humans' ability to control it, Datadog warns
Will legacy homo sapiens lose control of its systems as AI agents take the reins and complexity spirals beyond the comprehension of our species?
Systemic Risk
El Niño is a "systemic shock" that could wreck semiconductor supply chains, the WEF warns
“Crises no longer arrive neatly or sequentially. They overlap, compound, and amplify one another.”
Cyberwar
Russia is secretly waging a cyberwar against the UK, GCHQ chief claims
Moscow-linked threat actors are allegedly targeting supply chains and critical infrastructure in undeclared hybrid warfare operations.
Security
The second coming of Shai-Hulud: Worm returns in massive supply chain campaign
“The scale and speed of the spread resemble some of the most disruptive supply chain incidents we have seen in recent years."
Government
Government security leaders are still sharing sensitive information on WhatsApp
"Consumer applications were never designed to protect confidentiality or meet the demands of high-security environments."