Security Bulletin

A website framed as a game led AI assistants to submit private GitHub file contents.

This morning, an interesting phishing email hit my mailbox. It targets Metamask[ 1], a cryptocurrency wallet, available as a browser extension and a mobile app, that lets users store, send, and receive crypto money. It&#x27s pretty popular, so a...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

Leaders urge faster workforce adaptation as AI reshapes cyber and infrastructure.

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.

As AI reshapes cybersecurity workflows, John Paul Cunningham, CISO at SIlverfort, says the technology is creating opportunities rather than eliminating jobs — and there are more ways than ever to break into the essential field.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social engineering and obsfucation, including blockchain abuse.