Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Security at AI speed: The new CISO reality The CISO role has changed significantly over the past decade, but according to John White, EMEA Field CISO, Torq, the most disruptive shift is accountability driven by agentic AI. In this Help […]

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. Source: https://threatpost.com/google-patches-chromes-fifth-zero-day-of-the-year/180432/

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Source: https://threatpost.com/iphone-users-urged-to-update-to-patch-2-zero-days-under-attack/180448/

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. Source: https://threatpost.com/reservation-links-prey-on-travelers/180462/

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Source: https://threatpost.com/firewall-bug-under-active-attack-cisa-warning/180467/

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Source: https://threatpost.com/twitter-whistleblower-tldr-version/180472/

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Source: https://threatpost.com/cybercriminals-are-selling-access-to-chinese-surveillance-cameras/180478/

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Source: https://threatpost.com/ransomware-attacks-are-on-the-rise/180481/

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Source: https://threatpost.com/0ktapus-victimize-130-firms/180487/

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Source: https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/

2.5 million people were affected, in a breach that could spell more trouble down the line. Source: https://threatpost.com/student-loan-breach-exposes-2-5m-records/180492/

Recent supply chain attacks involving self-propagating worms have spread far, but the damage and long-term impact is hard to quantify. Source: https://www.darkreading.com/application-security/shai-hulud-hidden-cost-supply-chain-attacks

The Electronic Frontier Foundation is urging major technology companies to follow through on their promises to implement end-to-end encryption (E2E) by default across their services, as privacy concerns mount amid increased AI use. Source: https://www.darkreading.com/cloud-security/encrypt-it-already-pushes-big-tech-e2e-encryption

Ask the Expert: Organizations need to close the ownership vacuum, establish durable security controls, and ensure printers are protected as rigorously as other endpoints. Source: https://www.darkreading.com/cybersecurity-operations/what-organizations-need-to-change-when-managing-printers

Source: https://www.darkreading.com/events/shields-up-key-technologies-reshaping-cybersecurity-defenses

Researchers discovered a newly disclosed vulnerable driver embedded in Reynolds’ ransomware, illustrating the increasing popularity of the defense-evasion technique. Source: https://www.darkreading.com/threat-intelligence/black-basta-bundles-byovd-ransomware-payload

The threat actor has been compromising cloud environments at scale with automated worm-like attacks on exposed services and interfaces. Source: https://www.darkreading.com/cloud-security/teampcp-cloud-infrastructure-crime-bots

The ransomware group breached SmarterTools through a vulnerability in the company’s own SmarterMail product. Source: https://www.darkreading.com/application-security/warlock-gang-breaches-smartertools-smartermail-bugs

The acquisition allows the credit reporting agency to add SMS spam and scam prevention to its robocall blocking capabilities. Source: https://www.darkreading.com/cyber-risk/transunion-s-real-networks-deal-focuses-on-robocall-blocking

Ironically, security by obscurity has helped prevent dangerous OT attacks in recent years. It won’t be that way forever. Source: https://www.darkreading.com/ics-ot-security/ot-attacks-living-off-the-plant