Security Bulletin

Career-themed phishing lures targeted employees of US domestic airlines during Operation Epic Fury.

Agentic Fix addresses a critical bottleneck in the software development lifecycle where vulnerability discovery has been significantly accelerated, but the subsequent steps of triage, assignment, patching, and retesting remain largely manual.

Bitdefender's Fan Threat Index highlights four major threats targeting Formula 1 enthusiasts: counterfeit merchandise, fraudulent ticket sales, malicious streaming services, and sophisticated social engineering attacks.

Marlin AI operates within the AppOmni platform, continuously analyzing security indicators across business-critical applications.

PLAID ELITE handles the entire security operations workflow, including alert ingestion, enrichment, triage, investigation, and response, autonomously.

The attack campaign employs SEO poisoning to elevate fake installation pages in search engine results, leading developers searching for AI tools like Google Gemini CLI or Anthropic's Claude Code to typosquatted domains.

This integration aims to provide organizations with enhanced visibility and oversight for their use of Claude, a tool relied upon for knowledge work, analysis, and application development.

The incident came to light after Charter was listed on ShinyHunters' data leak site, where the group claimed to have stolen 40 million records.

The hacktivist group Ababil of Minab initially claimed responsibility for the breach, stating they had stolen and subsequently deleted data from the Los Angeles County Metropolitan Transportation Authority (LACMTA) systems.

The new feature automatically disconnects compromised endpoints from the network, limiting the risk of further impact while maintaining connectivity to the Defender for Endpoint service for continued monitoring.

New research from Flashpoint highlights a significant trend where threat actors are not focused on developing novel AI tools but rather on refining existing ones.