This week's threat landscape highlights major data breaches and supply chain attacks affecting global organizations. Japan's Digital Agency suffered a significant breach via a VPN vulnerability, while the marketing platform Brevo fell victim to a supply chain attack impacting 100,000 websites. Additionally, cyberattacks targeted oil tankers bound for the U.S., and Japanese image-sharing service Gyazo reported a massive breach exposing 23 million user records.
The rise of AI-driven threats is also prominent, with researchers identifying new attack vectors like BragJack for hijacking browser assistants and the 'Luciferus' uncensored AI service for malware creation. Critical vulnerabilities were addressed by major vendors including Check Point, Cisco, Oracle, and ISC. Meanwhile, nation-state actors from North Korea, China, and Iran continue sophisticated espionage and financial campaigns targeting IT professionals, government entities, and dissidents globally.
