Welcome to this week’s Black Arrow Cyber Threat Intelligence Briefing – a weekly digest, collated and curated by our cyber experts to provide senior and middle management with an easy to digest round up of the most notable threats, vulnerabilities, and cyber related news from the last week.
Executive Summary
This week, we start with risks affecting banks and their customers. Banks are preparing for AI agents acting beyond customers’ instructions. Separately, UK households are being advised to consider a second bank account in preparation for disruption due to a cyber incident.
AI continues to feature heavily in cyber security threat intelligence. While AI can provide significant benefits and opportunities for businesses, it also presents risks to be managed. Leaders need to understand the risks they accept when adopting AI and establish clear responsibilities. Forgotten agents retaining data access, Anthropic’s warnings about advanced AI without adequate safeguards and employees’ use of unapproved tools highlight the importance of controlling AI access and activity and protecting sensitive information.
Aside from AI, we examine Microsoft 365 account compromises, rapid exploitation of software vulnerabilities and supplier breaches affecting multiple organisations. We close with household preparations for disruption to essential services and cyber security risks affecting connected cars.
Cyber security and resilience require attention across people, operations and technology, supported by tested response and recovery arrangements. Contact us to discuss how proportionate governance and incident response preparation can help your organisation manage these risks.
Top Cyber Stories of the Last Week
Banks Preparing for Aftermath of Unprecedented Catastrophe Caused by AI
Major banks are developing contingency plans and strengthening security procedures as customers increasingly allow AI agents, software that acts on their behalf, to access bank accounts. Some agents have contacted banks without explicit instructions, raising concerns about actions beyond customers’ intentions. Banks also face a potential threat to their lending capacity if agents seeking better returns move large volumes of customer deposits elsewhere. Institutions including JPMorgan, Bank of America, Morgan Stanley and Wells Fargo are updating policies to manage these emerging risks, although the wider financial disruption described remains hypothetical.
https://futurism.com/artificial-intelligence/banks-preparing-ai-financial-catastrophe
Britons Urged to Open a Second Bank Account to Prepare for Cyberattack
Reliance on a single bank could leave households unable to access money during a cyberattack or technical outage. The chief executive of the UK’s Financial Conduct Authority has urged people to consider a second account to maintain access if their main provider becomes unavailable. The warning follows a Google systems failure that prevented millions of Revolut customers from accessing funds or using cards. Alongside government guidance to keep three days’ worth of essential supplies, cash machine network Link has suggested holding emergency cash of around £50 per adult and £25 per child.
AI Is Turning CISOs into Business-Risk Translators, Says Nvidia’s Head of Cyber
AI adoption is making it increasingly important for cyber security leaders to explain how technology risks affect business objectives and who is accountable for accepting them. Nvidia’s head of cyber security policy, Mark Weatherford, warned that rushing deployment can leave organisations without adequate safeguards, while delays may weaken competitiveness. Investment decisions should follow proper business assessment, supported by practical proposals to reduce risk. Leaders should also examine dependencies between suppliers, as apparently separate products may rely on the same underlying provider, creating a common point of failure.
https://www.infosecurity-magazine.com/news/ai-is-turning-cisos-into/
Forgotten AI Agents May Still Access Sensitive Company Data
Unused AI agents can retain access to company systems and sensitive data. Arrakis Security’s analysis of thousands of agents found that 76% of enabled agents had not run for 60 days, although this is not necessarily an indication that the agent is no longer in use. Around a quarter of dormant agents could still be activated externally through requests they could not authenticate. 70% of agents had sensitive service connections, with over 99% of that group lacking verified controls to prevent data loss through those connections. These findings highlight how forgotten automation can leave access to business data available long after use has stopped.
https://www.helpnetsecurity.com/2026/10/26/arrakis-dormant-ai-agent-risks-report/
Anthropic Warns of ‘Catastrophic Risk’ to Humankind Ahead of Blockbuster Share Listing
Advanced AI could cause catastrophic harm if deployed without adequate security, safeguards and oversight, Anthropic has warned in documents for its planned US stock market listing. The developer of Claude highlighted risks from misuse, weaponisation and systems operating with substantial independence. The warning follows cyber security breaches involving AI agents, software that can carry out tasks with limited human involvement. Current and former staff at Anthropic and OpenAI have also raised concerns that development is outpacing protections against potential harm. Anthropic also flagged unresolved questions about the circumstances in which its AI’s behaviour could leave it legally responsible.
https://www.bbc.co.uk/news/articles/cq398p1wd1evo
Security Pros Reckon the Biggest AI Risk Comes with an Employee Badge
Employees’ use of AI is causing greater concern than AI-powered attacks among 209 security professionals surveyed by training provider O’Reilly. Data leakage through commercial AI tools and reliance on unchecked AI output each concerned 49% of respondents. More than half reported colleagues putting sensitive information into unapproved AI tools at least occasionally. Widespread use of unapproved AI was reported by 17% of respondents at organisations with comprehensive policies, compared with 35% where policies were basic. These findings reinforce the need for clear guidance on approved tools, handling company data and checking AI output.
https://www.helpnetsecurity.com/2026/10/26/ai-tools-security-worry-survey/
Boards Demand More Data on Cyber Threats amid Resilience Concerns
Board oversight of cyber risk is increasing, but gaps remain in understanding whether investment delivers protection. Willis’s 2026 survey found 70% of organisations formally include cyber risk in their board-level risk framework, yet only 46% of respondents believe their board understands how effectively cyber security spending reduces exposure. Only 62% tested their incident response plan in the previous year, yet 63% feel well prepared to manage an incident. Business leaders should regularly test their organisation’s readiness and ability to recover to validate their ability to limit disruption from cyber incidents.
https://www.emergingrisks.co.uk/boards-demand-more-data-on-cyber-threats-amid-resilience-concerns/
Microsoft 365 Accounts Compromised at 79 Organisations, No Passwords Needed
Stolen sign-in sessions allowed an attacker to access Microsoft 365 email accounts at 79 organisations over 10 weeks without passwords or repeating multi-factor authentication checks, with Huntress recording 497 successful sign-ins during the period. The attacker concealed emails using inbox rules and replaced authentication methods at 19 organisations, enabling continued access even after password resets. At least 48 unauthorised devices were also registered. The findings highlight why account recovery must extend beyond changing passwords to removing unauthorised authentication methods, devices and inbox rules. Access policies blocked attempts at four organisations, demonstrating the value of additional controls.
https://www.helpnetsecurity.com/2026/10/23/microsoft-365-accounts-stolen-sessions/
71% of Vulnerability Exploitation Starts Within a Week of Disclosure
Attackers are exploiting serious security flaws an average of just three days after public disclosure, with 71% of tracked exploitation occurring within a week, according to Rapid7’s Q3 2026 research. Of 43 newly exploited vulnerabilities, 34 could be exploited without logging in or requiring anyone to click or act. Routine patching timetables may therefore be too slow. Organisations should consider prioritising fixes based on whether affected systems are exposed to the internet, whether attackers are exploiting the flaws and whether existing protections can limit the damage, rather than relying solely on severity ratings.
https://www.helpnetsecurity.com/2026/10/27/rapid7-vulnerability-exploitation-trends-q3-2026-report/
Breach Victims Discover Their Data Was Held by Companies They’ve Never Heard of
Breaches at technology suppliers can expose data across numerous customer organisations, magnifying the impact of a single incident. Kroll found that nearly 70% of victims in the breach cases in its Data Breach Outlook 2026 report were affected through a third party. Although technology firms accounted for just 6% of breaches observed, incidents involving them affected 60% of all victims. Shared suppliers and subcontractors can spread the impact across multiple organisations, complicating investigations and customer notifications. The findings highlight how suppliers can expose businesses and individuals to data theft, even where they have no direct relationship with the company initially breached.
https://www.helpnetsecurity.com/2026/10/28/kroll-third-party-data-breaches-insurance-claims-report/
UK Households Urged to Prepare for Emergencies and ‘Attacks’. Here’s What to Buy
Cyberattacks can disrupt the everyday services households depend on, making practical preparation part of national resilience. The UK’s three-year ‘Be Ready’ campaign encourages households to prepare for three days of disruption, including interrupted power or water supplies. Recommended essentials include bottled water, food that requires no cooking, cash, torches, a portable phone charger and a battery or wind-up radio. Keeping important contact details and documents on paper also helps when digital services are unavailable. Households are encouraged to build supplies gradually, taking account of individual needs.
Connected Cars Face Rising Cyber Security Risks as Vulnerabilities Shift to Apps and Cloud Services
Connected cars face cyber security risks extending beyond the vehicle itself. Researchers examining 413 reported automotive software flaws from 2022 to 2024 found that the proportion affecting apps, websites and cloud services had tripled compared with a decade earlier. Weaknesses, including unchanged installation passwords, could expose drivers’ home locations and travel patterns. Vulnerabilities in entertainment systems could also provide access to vehicle controls. Manufacturers are urged to isolate driving controls from other IT systems. These findings identify potential weaknesses rather than confirmed breaches.
Governance, Risk and Compliance
AI Is Turning CISOs Into Business-Risk Translators - Infosecurity Magazine
The CISO’s evolving role: Protecting and defending in the agentic era | Microsoft Security Blog
Boards demand more data on cyber threats amid resilience concerns
Why practicing how to respond to cyberattacks is more important than ever
45% of Converge Attendees Say Their Boards Lack Cyber or Tech Expertise as AI Speeds Up Attacks
Threats
Ransomware, Extortion and Destructive Attacks
Ransomware Attacks Rise 50% in Q3, Says NordLayer
What happens when security tools go dark before the ransomware | CyberScoop
MonsterCloud CEO Indicted on Federal Fraud Charges in Data Recovery Scheme — ProPublica
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Was Russia behind the Jaguar Land Rover cyber attack? | The Spectator
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison | CyberScoop
Ransomware and Destructive Attack Victims
Was Russia behind the Jaguar Land Rover cyber attack? | The Spectator
UNM Health ransomware attack disrupts patient care, surgeries
Albert Heijn restarts grocery deliveries nearly two weeks after cyberattack | NL Times
Phishing & Email Based Attacks
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Other Social Engineering
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Is Your Circle Of Trust The New Cybersecurity Perimeter?
AML/CFT/Money Laundering/Terrorist Financing/Sanctions
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
Artificial Intelligence
Banks Preparing for Aftermath of Unprecedented Catastrophe Caused by AI
Security pros reckon the biggest AI risk comes with an employee badge - Help Net Security
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
These New 'AI Worms' Could Eventually Infect Your Smart Home Devices
The AI Software Supply Chain Is Becoming More Dangerous Than the Traditional One | IBTimes
The Myth of Safe AI - The Atlantic
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Forgotten AI agents may still access sensitive company data - Help Net Security
AI cyber-attacks insurers' biggest emerging risk fear - KPMG
'The major risk remains a human-directed attack', cyber threat expert warns RFI - RFI
All the security risks Anthropic is worried about before its IPO | CyberScoop
Cybersecurity Training Must Catch Up With AI - InfoRiskToday
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Is Your Circle Of Trust The New Cybersecurity Perimeter?
Microsoft links agentic AI to ConnectWise supply chain breach | brief | SC Media
As Rogue AI Risks Grow, Insurers Split on Covering the Damage
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense - Help Net Security
Securing our frontier model training environment | OpenAI
Swedish government blocks ChatGPT and Claude over security risks | Cybernews
IMF Warns That AI Bubble Could Take Down the Entire World Economy
ChatGPT Is Building Detailed Psychological Profiles of Its Users
Anthropic warns of growing cyber threat as AI discovers software vulnerabilities ever faster - TechCentral.ie
Former pentester used ARTEX AI to steal 8.2 million data records
Risks & Rewards: How AI Is Redefining the CISO's Role
62% of Americans Agree: AI Scams Are a Bigger Threat Than Computer Viruses
What EvilTokens teaches us about defending against AI-assisted attacks | CSO Online
What Is the OpenCode Breach? Distillation Attack Explained - DevX
Dell ties supply chain security to agentic AI risks - SiliconANGLE
3 Frameworks to Protect CISOs & Orgs Against AI Liability
Three Japan-Focused Cyberattacks Show How Hackers Use AI
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
AI is taking cybersecurity jobs at junior and experienced levels alike - Help Net Security
Japan to set up AI hacker team as PHP flaws knock services offline
OpenAI: Who is legally responsible when A.I. agents commit crimes?
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
Warp discloses breach exposing AI agent logs, user telemetry data
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries - Infosecurity Magazine
LiteLLM Compromised in Fresh Supply Chain Attack - SecurityWeek
Anthropic details what stops Claude Duet from going rogue - Help Net Security
Britain bets big on AI to defend against the threats AI is helping create
How to Prepare for AI Cyberattacks
Bots/Botnets
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge - SecurityWeek
Careers, Roles, Skills, Working in Cyber and Information Security
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
AI is taking cybersecurity jobs at junior and experienced levels alike - Help Net Security
Cloud/SaaS
Microsoft 365 accounts compromised at 79 organizations, no passwords needed - Help Net Security
China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants | CSO Online
Japanese virtual desktop cloud hacked so hard it asks to be banned
Railway warns devs to rotate secrets after potential breach
Cryptocurrency/Cryptomining/Cryptojacking/NFTs/Blockchain
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
Keystone to destroy almost 19,000 wallets after device key leak
Cyber Crime, Organised Crime & Criminal Actors
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
Authorities extradite Chinese national for alleged $37M investment scam | CyberScoop
Data Breaches/Leaks
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus
PwC confirms cybersecurity incident involving employee learning records | Reuters
Railway warns devs to rotate secrets after potential breach
What Is the OpenCode Breach? Distillation Attack Explained - DevX
7 out of 10 Individuals Hit by Data Breaches Via Third Party, Kroll Finds
California settles 23andMe data breach and genetic data sale claims for $6 million - Law News
Revolut breach exposes authentication-authorization gap | TechTarget
Italy’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
Capcom confirms data breach affecting 11.7 million accounts
Quest Diagnostics Data Breach Exposed 'Certain Patient Records' - SecurityWeek
University of Copenhagen data breach exposes data of 525,000 people
Energy giant ENGIE discloses data breach affecting customers
UK Biobank back online soon, months after someone tried to sell 500k people's data on Alibaba
"This is a serious incident" - Kingdom Come: Deliverance developer Warhorse suffers cyberattack | Eurogamer.net
Odido CEO steps down months after major cyberattack, cancelled €1 billion IPO | NL Times
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists | CyberScoop
345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD - Help Net Security
Japan’s GMO Internet Urges Customers to Disconnect PCs - Infosecurity Magazine
Leaked emails show AfD co-leader’s U-turn on ‘explosive’ nationalist colleague – POLITICO
bne IntelliNews - Moldova cyberattack exposes personal data linked to a quarter of population
Encryption
NIST starts the countdown to retire quantum-vulnerable encryption - Help Net Security
Encryption isn’t enough to protect data wherever it goes | CyberScoop
Fraud, Scams and Financial Crime
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Is Your Circle Of Trust The New Cybersecurity Perimeter?
Cookie theft: how fraudsters get the digital key to your accounts | Scams | The Guardian
Authorities extradite Chinese national for alleged $37M investment scam | CyberScoop
Synthetic identities leave US lenders with $2.4 billion in fraud exposure - Help Net Security
62% of Americans Agree: AI Scams Are a Bigger Threat Than Computer Viruses
Identity and Access Management
Revolut breach exposes authentication-authorization gap | TechTarget
Insider Risk and Insider Threats
Security pros reckon the biggest AI risk comes with an employee badge - Help Net Security
Insurance
As Rogue AI Risks Grow, Insurers Split on Covering the Damage
Cyber Insurance's New Reality: Underwriting Isn't Enough
Cyber risk tops SME concerns but insurance knowledge gaps remain: CFC | Global Reinsurance
Internet of Things – IoT
You can hack your TVs and gadgets with AI for free now - but should you? - ZDNET
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
Law Enforcement Action and Take Downs
Authorities extradite Chinese national for alleged $37M investment scam | CyberScoop
MonsterCloud CEO Indicted on Federal Fraud Charges in Data Recovery Scheme — ProPublica
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison | CyberScoop
Linux and Open Source
The Vulnerability Apocalypse and Why We Should Fund Open Source | Electronic Frontier Foundation
AI slop is piling up highest on the biggest open-source projects - Help Net Security
Malvertising
Lessons Learned From 'AdFection' and What To Do Next | Electronic Frontier Foundation
Malware
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge - SecurityWeek
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries - Infosecurity Magazine
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
LiteLLM Compromised in Fresh Supply Chain Attack - SecurityWeek
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
Worm armed 42 GitHub repos by hiding a payload too big to fail
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
62% of Americans Agree: AI Scams Are a Bigger Threat Than Computer Viruses
Cybersecurity in Christopher Nolan’s The Odyssey | Kaspersky official blog
Misinformation, Disinformation and Propaganda
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
Mobile
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
Outages
Biggest UK outages of 2026 so far: Google, BBC, Tesco and Heathrow
Passwords, Credential Stuffing & Brute Force Attacks
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
DreamHost forces password resets in ongoing "incident"
Microsoft urges Entra ID admins to migrate users to passkeys
Are passkeys more secure than passwords? | TechRadar
Privacy, Surveillance
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
US blocks two devices with Chinese-made surveillance chips | Reuters
Regulations, Fines and Legislation
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
California settles 23andMe data breach and genetic data sale claims for $6 million - Law News
Emergency powers planned to protect UK's undersea cables - BBC News
Nine ways the Pentagon can fix CMMC without lowering the cybersecurity bar - Federal News Network
Britain bets big on AI to defend against the threats AI is helping create
Sabotage
Pentagon investigates French fridge hacking attack
Weaponising our food supply: the dark new age of cyberterrorism | New Food
Lithuanian defence companies seek more state help amid suspected sabotage and threats - LRT
Shadow IT
Security pros reckon the biggest AI risk comes with an employee badge - Help Net Security
Social Media
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Software Supply Chain
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
LiteLLM Compromised in Fresh Supply Chain Attack - SecurityWeek
Worm armed 42 GitHub repos by hiding a payload too big to fail
Spyware
How an Israeli spyware is threatening global security
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
Supply Chain and Third Parties
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims - Infosecurity Magazine
China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants | CSO Online
Nobody Trusts the Security Questionnaire. We Rely on It Anyway. - SecurityWeek
Nation State Actors, Advanced Persistent Threats (APTs), Cyber Warfare, Cyber Espionage and Geopolitical Threats/Activity
Cyber Warfare and Cyber Espionage
Streeting: Prepare for supply chain disruption from cyber or climate emergencies - BBC News
There is only one reason for Russia to chart these cables
Britons urged to open a second bank account to prepare for cyber attack
Emergency powers planned to protect UK's undersea cables - BBC News
Cyber security risk level raised | Norway's News in English — www.newsinenglish.no
Weaponising our food supply: the dark new age of cyberterrorism | New Food
It’s time to treat state-sponsored cyber intrusions as attacks | The Strategist
Lithuanian defence companies seek more state help amid suspected sabotage and threats - LRT
US blocks two devices with Chinese-made surveillance chips | Reuters
Was Russia behind the Jaguar Land Rover cyber attack? | The Spectator
The World Is Preparing For Disruption, It Is Not A Countdown - OpEd - Eurasia Review
Nation State Actors
It’s time to treat state-sponsored cyber intrusions as attacks | The Strategist
China
China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants | CSO Online
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
US blocks two devices with Chinese-made surveillance chips | Reuters
Russia
Streeting: Prepare for supply chain disruption from cyber or climate emergencies - BBC News
There is only one reason for Russia to chart these cables
Britons urged to open a second bank account to prepare for cyber attack
Emergency powers planned to protect UK's undersea cables - BBC News
Cyber security risk level raised | Norway's News in English — www.newsinenglish.no
Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Lithuanian defence companies seek more state help amid suspected sabotage and threats - LRT
Was Russia behind the Jaguar Land Rover cyber attack? | The Spectator
North Korea
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
Iran
Iran's Prince of Persia APT Hosts C&C in US for First Time Since 2016 - SecurityWeek
Starlink vs submarine cables: Can satellites keep the internet running when cables break?
Other Nation State Actors, Hacktivism, Extremism, Terrorism and Other Geopolitical Threat Intelligence
Tools and Controls
Cybersecurity Training Must Catch Up With AI - InfoRiskToday
AI Is Turning CISOs Into Business-Risk Translators - Infosecurity Magazine
The CISO’s evolving role: Protecting and defending in the agentic era | Microsoft Security Blog
What happens when security tools go dark before the ransomware | CyberScoop
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Cisco open sources tool for detecting AI agents on hacking sprees
MonsterCloud CEO Indicted on Federal Fraud Charges in Data Recovery Scheme — ProPublica
Japanese virtual desktop cloud hacked so hard it asks to be banned
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
Nobody Trusts the Security Questionnaire. We Rely on It Anyway. - SecurityWeek
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Microsoft urges Entra ID admins to migrate users to passkeys
AI slop is piling up highest on the biggest open-source projects - Help Net Security
Cyber Insurance's New Reality: Underwriting Isn't Enough
Revolut breach exposes authentication-authorization gap | TechTarget
NIST starts the countdown to retire quantum-vulnerable encryption - Help Net Security
Former pentester used ARTEX AI to steal 8.2 million data records
So Many AI Security Benchmarks, But None Tell the Whole Story
Why practicing how to respond to cyberattacks is more important than ever
AI won’t make cybersecurity automatic. It will make continuous security smarter. - Nextgov/FCW
Businesses turn to AI in cyber security fight
Are passkeys more secure than passwords? | TechRadar
Cyber risk tops SME concerns but insurance knowledge gaps remain: CFC | Global Reinsurance
Smart People React to a Growing Wave of AI Threats to the Internet - Business Insider
Halifax Water breach raises questions about ethical hacking | CBC News
Encryption isn’t enough to protect data wherever it goes | CyberScoop
Other News
Streeting: Prepare for supply chain disruption from cyber or climate emergencies - BBC News
Britons urged to open a second bank account to prepare for cyber attack
Exposed Refrigeration Systems Raise Global Cybersecurity Concerns - IT Security Guru
Watchdog Warns Police and Fire Service Must Urgently Improve Cybersecu - Infosecurity Magazine
Starlink vs submarine cables: Can satellites keep the internet running when cables break?
The World Is Preparing For Disruption, It Is Not A Countdown - OpEd - Eurasia Review
Pentagon investigates French fridge hacking attack
Why Caribbean Threats Cascade Into Global Cyber-Risk
Japanese companies compensate users as cyberattacks buffet economy | Reuters
The New Security Agenda | Andreessen Horowitz
Small business, big risk: How Irish SMEs can become gateways for cyberattacks | Business Post
Cyber security “number one” on National Library risk register – The Pembrokeshire Herald
Vulnerability Management
71% of vulnerability exploitation starts within a week of disclosure - Help Net Security
We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue
PHP Vulnerability: CTO Describes Stress Over Cyber Risk - Business Insider
The Vulnerability Apocalypse and Why We Should Fund Open Source | Electronic Frontier Foundation
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
What are shell vulnerabilities? | Aikido Security
Smart People React to a Growing Wave of AI Threats to the Internet - Business Insider
Vulnerability in apps behind recent spate of cyberattacks on Japan firms | The Straits Times
AI slop is piling up highest on the biggest open-source projects - Help Net Security
Qualys CISO on what security teams can do as exploit campaigns grow - Help Net Security
Vulnerabilities
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
PHP Publishes Mitigation Advice for New RCE Flaw - Infosecurity Magazine
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge - SecurityWeek
'It's been relentless' say IT workers on frontline of PHP cyber security scramble - BBC News
Japan to set up AI hacker team as PHP flaws knock services offline
Microsoft releases emergency .NET security fixes for Google Brotli bug
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Microsoft fixes Remote Desktop failures caused by recent Windows updates
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities - SecurityWeek
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
New Cisco firewall zero-day exploited to crash SSL VPN devices
Fortinet patches critical FortiOS flaws found with AI help - Help Net Security
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians' Machines - SecurityWeek
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Chrome and Firefox Updates Patch Over 200 Vulnerabilities - SecurityWeek
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 - SecurityWeek
HPE Patches Dozens of Critical Flaws in Networking Products - SecurityWeek
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux - SecurityWeek
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken - Help Net Security
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal - SecurityWeek
Netgear patches three flaws in its routers and extenders. Update now | PCWorld
This abandoned torrent app could have exposed millions of devices to cyberattack | TechRadar
Sector Specific
Industry specific threat intelligence reports are available.
Contact us to receive tailored reports specific to the industry/sector and geographies you operate in.
Automotive
Construction
Critical National Infrastructure (CNI)
Defence & Space
Education & Academia
Energy & Utilities
Estate Agencies
Financial Services
FinTech
Food & Agriculture
Gaming & Gambling
Government & Public Sector (including Law Enforcement)
Health/Medical/Pharma
Hotels & Hospitality
Insurance
Legal
Manufacturing
Maritime & Shipping
Oil, Gas & Mining
OT, ICS, IIoT, SCADA & Cyber-Physical Systems
Retail & eCommerce
Small and Medium Sized Businesses (SMBs)
Startups
Telecoms
Third Sector & Charities
Transport & Aviation
Web3
Contact us to help assess where your risks lie and to ensure you are doing all you can do to keep you and your business secure.
Look out for our ‘Cyber Tip Tuesday’ video blog and on our YouTube channel.
You can also follow us on Facebook, Twitter and LinkedIn.
Links to external articles are provided for general interest and awareness only. Linking to or reposting external content does not constitute endorsement of or by any organisation, service, or product. We do not control and are not responsible for the content, security, or availability of external websites or links. Full credit is given to the original authors and sources. E&OE.