NSA undergoes major reorganization into five mission centers
The NSA is restructuring into five mission centers covering China, cybersecurity, AI, combat support, and global intelligence, aiming to speed intelligence delivery to military forces by January.
The NSA is restructuring into five mission centers covering China, cybersecurity, AI, combat support, and global intelligence, aiming to speed intelligence delivery to military forces by January.
EU mandates 24-hour disclosure of crypto wallet vulnerabilities
Under the Cyber Resilience Act, crypto wallet makers must report exploited vulnerabilities to ENISA and CSIRTs within 24 hours, with full reports in 72 hours and final reports in 14 days.
Under the Cyber Resilience Act, crypto wallet makers must report exploited vulnerabilities to ENISA and CSIRTs within 24 hours, with full reports in 72 hours and final reports in 14 days.
South Korea enacts new law against strategic technology espionage
The new law expands espionage crimes from North Korea to all foreign countries, imposing at least 3 years in prison and targeting chips, displays, batteries, and AI technologies.
The new law expands espionage crimes from North Korea to all foreign countries, imposing at least 3 years in prison and targeting chips, displays, batteries, and AI technologies.
BRICS agrees on Delhi Declaration
BRICS members approved the Delhi Declaration at their 18th summit, stressing stronger cooperation, global governance reform, and joint work on cybersecurity, digital infrastructure, AI, digital public infrastructure, and submarine cables.
BRICS members approved the Delhi Declaration at their 18th summit, stressing stronger cooperation, global governance reform, and joint work on cybersecurity, digital infrastructure, AI, digital public infrastructure, and submarine cables.
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users.
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution.
Thai ISP 3BB attacker had root access and hid MeshCentral for persistence.
Recovered tools sprayed passwords across 55+ internal systems and targeted subscriber login databases.
Recovered tools sprayed passwords across 55+ internal systems and targeted subscriber login databases.
Attackers are exploiting a Cisco Secure Email Gateway vulnerability that can let a crafted email trigger command execution as root.
Cisco has released fixes, and CISA added CVE-2026-76461 to its KEV catalog.
Cisco has released fixes, and CISA added CVE-2026-76461 to its KEV catalog.
A human attacker exploited Marimo’s pre-auth RCE and reached an SSH bastion in eight seconds.
The operator used harvested AWS credentials to fetch the private key from Secrets Manager and authenticate over SSH. No AI agent was involved.
The operator used harvested AWS credentials to fetch the private key from Secrets Manager and authenticate over SSH. No AI agent was involved.
Warning: LiteSpeed Enterprise before 6.3.7 can let low-privilege website users gain root on shared-hosting servers.
It can bypass CageFS isolation. No CVE is assigned, exploitation is unknown, and 6.3.7 may not auto-update immediately.
It can bypass CageFS isolation. No CVE is assigned, exploitation is unknown, and 6.3.7 may not auto-update immediately.
Exposed Vite dev servers are being scanned for cloud credentials.
Attackers are exploiting a Vite flaw to bypass file restrictions and retrieve .env files, AWS and Azure credentials, and infrastructure state.
Attackers are exploiting a Vite flaw to bypass file restrictions and retrieve .env files, AWS and Azure credentials, and infrastructure state.
Eclipse Ransomware Group Claims Attacks in France and US — The group says it stole about 60GB from French firm Rosello et Fils; the claims remain unverified.
Ukraine-Linked Hackers Use New Malware Against Russian Targets — Kaspersky links “Hacking Cat” to Gorilla RAT and Monkey malware for remote access and data destruction
Revolut Hit by Customer Data Leak via Fake Government Requests — The UK fintech says personal and ID data was exposed after spoofed emails from a trusted government domain.
China Calls Anthropic’s AI Slowdown Plea a Cold War Tactic — Global Times accuses the US of trying to limit China’s AI progress; Trump vows to keep America ahead.
150+ cybersecurity giants—Microsoft, Google, OpenAI, Anthropic—warn AI is supercharging cyberattacks.
Palo Alto’s Unit 42 simulated a full ransomware attack in just 25 minutes using AI: a 100x speed increase.
Zero-day production is now 100x faster than humans alone.
Palo Alto’s Unit 42 simulated a full ransomware attack in just 25 minutes using AI: a 100x speed increase.
Zero-day production is now 100x faster than humans alone.
Amazon says its cloud infrastructure in Bahrain and the UAE is beyond saving after missile strikes. The Gulf is now rebuilding AI data centers with war-proofing: underground sites, missile interceptors, dispersal, hardened power. The cloud is no longer just IT. It’s a target.
Jump Jump VPN User Data Allegedly Leaked — A 1.2GB dataset reportedly includes names, phone numbers, national IDs, payments, sessions, device details, and logs.
Israel Expands Cyber Influence in Latin America — Colombia, Ecuador, and Argentina pursue cooperation on surveillance, AI, and cybersecurity, raising privacy concerns.
#TGITM
#TGITM