World watch

A CrowdStrike report notes eCrime leads attacks and China activity intensifies with no further details stated.

Cisco releases Project Quarry to help detect AI agents during hacking activity in a shared evaluation format now.

A denial-of-service vulnerability affects millions of Intelbras IP cameras built on a platform from a Chinese manufacturer.

Infisical raised $40 million in Series B funding to expand its platform for securing AI agent access to sensitive systems.

CISA adds a Brotli flaw to KEV as honeypots log Node2Shell exploitation attempts with at least one broken exploit in use.

Malware News reports older adults can spend more time on social platforms than intended and lose track of time.

Global Retail Group replaces legacy BAS with Picus for red teaming and auto-remediation in a stated action.

Interpol made 1,462 arrests across 20 African countries and the US and recovered $105 million in stolen funds in a third sweep.

A flaw in EDK2 allows code execution early in the boot process on affected server firmware systems.

Majinahanashi launched a ransomware attack on Jons Civil Engineering according to a report from Malware News.

Privacy Commissioner of Canada opens an investigation into a cybersecurity incident involving tips shared with Crime Stoppers programs across Canada.

Attackers used fake Korean company sites to support ValleyRAT infrastructure and request cryptocurrency payments.

A Shai-Hulud attack shows SBOMs alone cannot show the scope of a supply chain compromise for affected services.

Anthropic cites AI security risks before an IPO and notes profit may affect those decisions in a reported statement.

Cyber leaders may use three frameworks to address AI liability through documentation, transparency, and vendor contract terms.

Open-source maintainers limit AI bug reports as OpenAI calls for higher quality findings and more coordination between actors.

Attackers use email bombing and external Teams chats with impersonation and domain tools to gain access across organizations now.

An AI tool found four EPICS bugs in under four hours and one bug was critical while three had high severity for research systems.

A cyberattack disrupted care at the University of New Mexico Health System, leading to ambulance diversions and canceled clinic appointments.

Aokigahara stealer targets developer keyrings and AI assistants to access sessions and sensitive data from one endpoint.