World watch

Carriers move beyond risk transfer as AI, social engineering and cloud risks increase pressure on cyber insurance underwriting practice.

SecurityWeek reports Tor exit relay hijack, rogue AI agents at banks and self-rebuilding macOS ransomware with no added details.

A reported trend shows faster exploits in one region placing pressure on global cyber-risk without stated assurance measures in place.

Mirai operators target PHP2Shell with an ASLR bypass, but researchers report no confirmed successful compromise to date.

Microsoft adds Guardian Agents to Project Perception to monitor anomalous AI agents. Experts warn agent policing may multiply risk in practice now.

A China-linked APT used an AI pentest tool against ConnectWise to gain privileged access at targeted organizations in recent attacks.

UK plans tougher penalties and new powers over telecoms operators after Russian activity raised concern about subsea cable security.

Hackers stole email addresses from CAPCOM ID and changed passwords for 196 accounts in a reported breach.

Four companies appeared on ransomware leak sites in one reporting period with varied data types listed.

Iran-linked Prince of Persia APT has placed a Tornado command and control server on US shared hosting, marking its first US-based infrastructure since 2016...

A reported leak of customer PII at State Bank of India draws attention to trade in such data on an underground market in India.

Malware News reports possible traffic from a Coruna-like iOS exploit kit with no further details stated in the available source material now.

The report comes from Malware News. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.

Six companies appear as new victims on a ransomware leak site within the last 18 hours across five groups.

A reported exploit bypasses protections designed to stop remote code execution in PHP environments with noted adversary interest.

A China-linked actor used an AI tool to attack over 2,200 ConnectWise tenants via a supply chain vector now linked to Storm-0940.

Hundreds of EU supermarkets lost millions of euros after a third party managed obsolete OT firmware for refrigeration systems.

U.S. federal action targets Texas laptop farms linked to North Korea stateside infrastructure under one named operation.

The report comes from The Register. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.

Two outlets report PHP vulnerabilities with available Snort coverage and Talos analysis for security teams to note now.