World watch

Nvidia security executive says CISOs must help weigh AI risks and assign responsibility for deployment decisions in business settings.

An exposed master key allowed a supply chain attack on LiteLLM, according to a report from The Register.

A supply chain attack uses stolen GitHub tokens to harvest credentials and sensitive data from developer repositories.

Senators and rights groups say the Trump administration breaks law by withholding a classified surveillance court opinion on Section 702.

Microsoft released emergency .NET fixes after a Google Brotli compression bug prompted action from multiple software maintainers.

A UK pentester claims a Bitcoin prize after completing a PHP2Shell capture-the-flag contest in about three hours.

Two outlets report the same podcast item with no stated cyber event or technical action reported in the source material.

Siemens, Schneider Electric and ABB check products for PHP2Shell as vendors assess exposure across affected industrial systems now.

Dark Reading reports a focus on long-term software security practices for digital system resilience across future generations.

A malware campaign infected 953 online stores by injecting small loader code that served payloads to visitors or remained inactive to avoid detection. The...

Dutch police arrested two suspects after NFC relay attacks led to bank account drains through deceptive calls to install an app and scan cards.

Kaspersky products address AI agent threats in corporate settings through defined controls and detection methods for endpoint and threat data.

Proofpoint joins the Microsoft Integrated Cloud Email Security ecosystem to operate within that defined program for email security functions.

The report comes from Ransomware.live. 1 outlet reported this event inside 18 hours. Here is what happened, why it matters, and what to do next.

Dragonforce has listed Inside Passage Electric Cooperative, Inc as a new victim on a public leak site.

Scarlettgroup lists Mah Sing Group as a new victim on Ransomware.live with no further details stated in the available source material now.

Work on DNS protection against quantum decryption is advancing as related registry and domain issues draw separate attention now.

Malware News notes an IMBT course offer with a stated coupon code for trained security practitioners in a limited promotion context now.

Whitearmor lists LoveSac and J.B. Hunt as victims after data claims on Ransomware.live.

Majinahanashi ransomware targeted Bi-silque. The report states the event with no confirmed scope or response details at this time.