Security
Hollowgraph malware turns Microsoft 365 calendars into secret-stealing "dead drop"
Command-and-control tool targets Israeli entities and shares technical similarities with a backdoor previously linked to an Iranian threat actor.
Machine
The DragonForce ransomware gang just gave us another huge reason to hate Microsoft Teams
Hackers piggybacked on the deeply unpopular communications app to quietly siphon data out of a "major US services firm".
AI
Software complexity is outpacing humans' ability to control it, Datadog warns
Will legacy homo sapiens lose control of its systems as AI agents take the reins and complexity spirals beyond the comprehension of our species?
Systemic Risk
El Niño is a "systemic shock" that could wreck semiconductor supply chains, the WEF warns
“Crises no longer arrive neatly or sequentially. They overlap, compound, and amplify one another.”
Cyberwar
Russia is secretly waging a cyberwar against the UK, GCHQ chief claims
Moscow-linked threat actors are allegedly targeting supply chains and critical infrastructure in undeclared hybrid warfare operations.
Security
The second coming of Shai-Hulud: Worm returns in massive supply chain campaign
“The scale and speed of the spread resemble some of the most disruptive supply chain incidents we have seen in recent years."
Government
Government security leaders are still sharing sensitive information on WhatsApp
"Consumer applications were never designed to protect confidentiality or meet the demands of high-security environments."
Enterprise
"Where risk and invisibility collide": Mapping Shadow AI in the enterprise
"Employees are not trying to be reckless, but unmanaged AI creates a direct path for sensitive data and information to leave the business."
Cyberwar
Russian cyber-spies target UK and European officials via messaging apps
High-risk figures warned to exercise extreme caution when using WhatsApp, Signal and other third-party applications.
Security
Threat actors exploit identity at “industrial scale” as trust becomes the attack surface
Adversaries are pushing beyond the perimeter to exploit the trusted infrastructure that keeps global businesses running.
Government
US ban on Chinese routers leaves “millions” of insecure devices in American homes
Blocking sales of foreign-made routers will fail to secure vast numbers of older devices described as threat actors’ “attack vector of choice”.
Crime
Phishing gangs are posing as government officials to steal money from permit applicants
FBI issues warning about new scam involving the impersonation of city and county fee collectors.