The US Cybersecurity and Infrastructure Security Agency has outlined its CISA 2030 strategy, establishing a proactive model focused on rapid threat response and critical infrastructure resilience.
A supply chain attack dubbed Gheist is exploiting compromised GitHub tokens to scan developer repositories and harvest sensitive cloud credentials.
A widespread cybersecurity campaign has leveraged adversary-in-the-middle (AitM) techniques to bypass multi-factor authentication and compromise nearly 100 Microsoft 365 accounts across 79 different organisations.
Security researchers have confirmed active exploitation of PHP2Shell vulnerabilities, allowing remote code execution. A second, unpatched vulnerability has also been identified affecting certain configurations.
Major cybersecurity providers are rapidly integrating agentic AI into their platforms, focusing on autonomous threat detection and response to combat evolving machine-speed threats.
