The skill ceiling to become a real ransomware threat actor may have been lowered considerably, as JadePuffer performed an attack as an AI agent with no human intervention, being able to reason its way through problems encountered when deploying ransomware to a target.

Sources: https://pastebin.com/XQFj8LAi

Randomness is not as random as it seems, and this can cause problems, especially when your money relies on it. Some crypto wallets generated predictable random passphrases that can be used to access accounts and steal funds.

Sources: https://pastebin.com/rBsjQY6W

AI email filters may be worse at detecting old tricks than traditional spam filters as old tactics are being used against old agents to allow in malicious or spam emails.

Sources: https://pastebin.com/Pm7fqAjY

Vatican app ClickToPray has had an unpatched IDOR sitting in its website that could allow for scraping the data of every single user.

Sources: https://pastebin.com/SiYDAR40

Water is a critical infrastructure, and lately multiple water plants across the US are under attack, starting in Minnesota. So far drinking water is safe, but it does bring into question the security of our basic utilities.

Sources: https://pastebin.com/avMEu9zq

A recent study of publicly accessible AI models found that patches generated by them fail about half the time, often introducing new vulnerabilities or leaving paths for exploitation open.

Sources: https://pastebin.com/WAq4vT55

Is the US establishing their first APT group to address foreign cyber threats? Possibly. Private sector firms can now apply to be essentially cyber privateers.

Sources: https://pastebin.com/VFihFaxH

As cars become computers on wheels there are more opportunities for hackers to exploit them to become tools in a larger operation. This is the first time we've seen the exploitation of an aftermarket head unit system, but it won't be the last.

Sources: https://pastebin.com/FdXwZBtt