Vulnerabilities

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption and Ships Fix

Progress closes the ShareFile emergency with a confirmed zero-day and shipped fix — Storage Zones Controller customers apply and restore this week.

Policy & Government

White House Details ‘Gold Eagle’ Clearinghouse for AI Cyber Threats

A White House policy signal on AI cyber threats — federal-adjacent organizations align this week.

Nation-State Cyber Threats

Iran Abused Mobile-Network Vulnerabilities to Locate US Military Personnel, TechCrunch Reports

A nation-state mobile-network-vulnerability disclosure with defense-sector implications — coverage this week.

Supply Chain Attack

148 npm Packages Disguised as Student Proxies Reportedly Turned Browsers Into a DDoS Botnet

A large-scale JavaScript-ecosystem supply-chain compromise — defender inventory work this week.

Artificial Intelligence (AI)

Cursor IDE Auto-Executes Malicious Code in Poisoned Repositories, Researchers Say

An AI-IDE supply-chain finding — defender review for organizations using Cursor this week.

Artificial Intelligence (AI)

Researchers Disclose Unpatched Claude for Chrome Flaw Tied to Gmail, Calendar Reads

An AI-browser extension disclosure with cross-tenant data implications — defender review for Claude for Chrome deployments this week.

Threat Intelligence

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft maps ShinyHunters' Salesforce activity — defender review for SaaS-heavy organizations this week.

Cybercrime

UK Charges Five Over “Russian Coms” Fraud Platform Behind More Than a Million Scam Calls

A UK fraud-platform prosecution at scale — law-enforcement coverage this week.

Policy & Government

Pentagon Suspends CMMC Phase 2 Requirements for Defense Contractors

A CMMC-framework pause from the Pentagon — defense-contractor compliance work re-scoped this week.

Policy & Government

US Treasury Sanctions First VPN Service, Malware Cryptor Seller Over Ransomware Support

A US Treasury sanctions package targeting VPN and cryptor infrastructure that reportedly supports ransomware — regulatory coverage this week.

Vulnerabilities

Researchers Disclose RabbitMQ Flaws That Could Leak OAuth Secrets, Expose Cross-Tenant Queue Metadata

A message-queue vulnerability with OAuth and multi-tenancy implications — defender review for RabbitMQ deployments this week.

Vulnerabilities

VMware Patches Seven Severe Avi Load Balancer Vulnerabilities

A seven-flaw Avi Load Balancer patch cycle from VMware — defender verification this week.