Thought Leadership
Data Leak
Security researchers have discovered a publicly accessible Elasticsearch instance belonging to Nextcloud that exposed internal company data, customer contracts, and installation scripts.
Adobe ColdFusion
A critical Adobe ColdFusion vulnerability with the maximum CVSS score of 10 is being actively exploited in the wild. Attackers began targeting affected systems within just two hours.
Outside the EU
Microsoft is changing the default behavior of a Windows feature that backs up device settings. With Windows 11 26H2, the feature will be enabled automatically — unless administrators explicitly disable it. Organizations outside the European Union will need to take action if they want to prevent it.
Confirmed Cybersecurity Incident
Global consulting and IT services firm Accenture has confirmed a cybersecurity incident after a threat actor advertised what were claimed to be stolen company data for sale on an underground hacking forum.
When AI Agents Take Control
With autonomous AI agents entering enterprise workflows, AI hallucinations are taking on a new level of risk. As these systems become increasingly capable of acting independently, the key challenge is detecting hallucinations early and keeping them under effective control.
Data Leak Allegations
Deutsche Bank has surfaced as the latest alleged victim of the ransomware group Unsafe on a well-known dark web leak site. To support its claims, the cybercriminals published screenshots showing command-line interfaces and database queries.
ShinyHunters Obtain Sensitive Patient Information
The medical technology company Medtronic is currently notifying nearly 3.8 million individuals whose personal and medical information was compromised in a cyberattack targeting the company’s IT systems.
Software Development
Gartner predicts that by 2029, around 60 percent of organizations will rely on significantly smaller software development teams. Today, that figure stands at just 15 percent.
Following the merger
SpaceX officially retired the xAI brand on Monday, months after acquiring the AI company in February. The business now operates under the SpaceXAI name, complete with a new logo and a new account on X.
Complete Data Destruction
Security researchers at Sysdig have documented what they describe as the first fully autonomous ransomware attack executed by an AI agent.