Security Bulletin

Veeam's Shiva Pillay discusses ensuring data trust and contextualization for AI security.

Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of trust to spread a cross-platform clipboard hijacker.

Nearly two-thirds of scam victims globally, or 64.5%, believe AI tools played a role in the fraud attempts.

Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.

Per TechCrunch, Signal President Meredith Whittaker has voiced significant concerns regarding the privacy implications of widely used AI chatbots, emphasizing that these tools should not be perceived as sentient or trustworthy entities.

The Prinz Eugen threat actor employs a hands-on-keyboard approach, leveraging legitimate remote monitoring and management (RMM) software and living-off-the-land tools, according to Threatdown.

The vulnerability resides in an exposed REST API endpoint within the Gravity SMTP plugin.

The Federal Data Center Enhancement Act of 2023, which currently governs federal facilities nationwide, mandates protections for uptime, power reliability, physical security, cybersecurity, and resilience against natural disasters.

The big lesson: too many organizations still don’t understand how identity works inside their applications.

As threats proliferate and AI complicates cybersecurity, CISOs say the job is getting harder, but more companies still want cybersecurity expertise, if even on a part-time basis.