Security Bulletin

[This is a Guest Diary by Adam Cann, an ISC intern as part of the SANS.edu BACS program]

The Agentic AI Blocking capability addresses the risk of AI agents with autonomous capabilities operating within enterprise environments.

The attackers meticulously clone legitimate websites of Russian firms across various sectors, including manufacturing, logistics, and banking.

Researchers from Noma Security discovered the flaw in Ruflo, formerly Claude Flow, which hosts AI agent swarms for Codex and Claude Code.

The Flying Eagle framework is being distributed as a fake "公安一网通办" Public Security service application targeting Android users in China.

A premium-grade malware-as-a-service offering takes flight with multiple threat groups, building infostealers that drain victims' bank accounts.

ShinyHunters primarily targets cloud SaaS and storage platforms through supply chain and identity attacks.

The leaked database contains approximately 23.4 million user records, 13.6 million device records, and 2.6 million payment records.

The goal of the 1/4 Initiative is to modernize and unify the Naval Surface Warfare Center Corona Division's IT and data architecture, transitioning from a fragmented system to a single-design, four-environment ecosystem.

According to SDx Central, Andrea Carcano has returned to Nozomi Networks to assume the role of CEO, replacing Edgard Capdevielle.

Founded in 2017, Spur Intelligence provides real-time intelligence to help organizations identify anonymized, proxied, and obfuscated web traffic, thereby reducing fraud and enforcing compliance.

The new service is designed to combat AI-driven cyber threats and enhance cyber resilience for organizations operating within the European Union.