Security Bulletin

This morning, an interesting phishing email hit my mailbox. It targets Metamask[ 1], a cryptocurrency wallet, available as a browser extension and a mobile app, that lets users store, send, and receive crypto money. It&#x27s pretty popular, so a...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

Leaders urge faster workforce adaptation as AI reshapes cyber and infrastructure.

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.

As AI reshapes cybersecurity workflows, John Paul Cunningham, CISO at SIlverfort, says the technology is creating opportunities rather than eliminating jobs — and there are more ways than ever to break into the essential field.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social engineering and obsfucation, including blockchain abuse.

Explore Cisco Live US 2026 highlights to see how secure, AI-ready infrastructure is transforming the public sector industries. Catch up on expert-led sessions and real-world use cases on-demand.

At this year’s Cisco Live Las Vegas we introduced Policy Studio, an AI assistant in Cisco AI Defense that guides users through building custom policies for adaptive guardrails. The assistant interactively walks the user through the process..........