An npm package disguised as an OpenAI Codex interface with 29,000 weekly downloads steals authentication tokens and enables attackers to abuse APIs under stolen identities.
A China-aligned group distributes targeted phishing emails with malicious ZIP attachments in Czechia and Taiwan to gain access to government, research institutions, and financial sector organizations.
Barely perceptible acoustic signals embedded in audio files can covertly manipulate AI speech models into data exfiltration or network access, while conventional security mechanisms fail to detect 70–93 percent of attacks.
Vodafone refused to pay Lapsus$ extortionists, prompting the group to publish source code and infrastructure documentation—confirming security leadership’s stance against ransom payments.
Microsoft authentication services have experienced a global outage, preventing MFA configuration and access to the central portal for sign-in activity management.
Gentlemen uses autonomous network propagation to roll out encryption across multiple systems simultaneously, overwhelming conventional detection and containment mechanisms.
CISOs must shift their perspective from IT protection to business resilience and align the pace of their security measures with threat actors and business development.
Cyber resilience must be planned across ecosystems rather than within individual organizations, as dependencies create attack vectors and propagation pathways for security incidents.
