TheNde
Security· · 1 min

Ransomware on the Rise.

Today’s cybersecurity landscape is buzzing with vulnerabilities and exploitations. From ransomware targeting AI models to significant data breaches, the stakes have never been higher. Let’s dive into what you need to know to stay secure.

In brief
  1. Ransomware on the Rise
  2. Critical Vulnerabilities Under Fire
  3. Data Breaches and Legal Scrutiny
01 · Security

Ransomware on the Rise

ENCFORGE ransomware targets AI model files.
ENCFORGE ransomware targets AI model files.

The new ENCFORGE ransomware is making waves by targeting AI model files in a recent Langflow RCE attack. Meanwhile, the Qilin ransomware gang exploits a critical VPN bug to breach networks. These attacks highlight the evolving tactics of cybercriminals.

02 · Security

Critical Vulnerabilities Under Fire

ServiceNow vulnerability exploited in the wild.
ServiceNow vulnerability exploited in the wild.

A critical flaw in ServiceNow is reportedly being exploited just days after disclosure, allowing unauthenticated code execution. Similarly, a critical VPN bug in Palo Alto's GlobalProtect is being actively abused by attackers. These cases underscore the urgency of timely patching.

03 · Security

Data Breaches and Legal Scrutiny

Estée Lauder faces fallout from Oracle EBS breach.
Estée Lauder faces fallout from Oracle EBS breach.

Estée Lauder disclosed a significant data breach linked to an Oracle EBS zero-day hack, exposing sensitive employee information. Meanwhile, legal scrutiny is mounting over AI 'nudify' apps on major app stores, raising ethical questions about tech companies' responsibilities.

04 · Security

AI’s Double-Edged Sword

Google's Gemini AI aims to enhance vulnerability management.
Google's Gemini AI aims to enhance vulnerability management.

Google’s new Gemini 3.5 Flash Cyber AI aims to find and fix software vulnerabilities faster than ever. However, as AI evolves, so do the threats, with researchers warning about new attack vectors like open-source Android AI agents that could execute code on host PCs.

Key numbers
870GB

Amount of data leaked from Estée Lauder during the Oracle EBS hack.

Source
1,970

Number of domains blocked in the FIFA World Cup piracy crackdown.

Source
$78,000

Amount paid by Meta for a vulnerability bounty related to customer support data exposure.

Source
Top stories
BleepingComputer

US Seizes 1,000+ FIFA Streaming Websites

The U.S. Justice Department has seized over 1,000 websites used for unauthorized FIFA World Cup streaming. This crackdown is part of a broader effort to combat copyright infringement and protect consumers from malware.

BleepingComputer

Microsoft Offers Fix for WSUS Sync Issues

Microsoft has shared manual fixes for Windows Server Update Services affected by sync delays and timeouts. Admins can restore functionality with these steps after a service-side mitigation was rolled out.

Quick links
  1. Ukraine Warns of Fake CAPTCHAsUkrainian CERT warns that fake CAPTCHAs are tricking users into executing malicious commands. — Bitdefender
  2. AI Video Surveillance at MITMIT invests over $3 million in AI surveillance cameras capable of real-time data collection. — Schneier on Security
  3. Zimbra Patches VulnerabilitiesZimbra releases updates to fix critical vulnerabilities, including command injection and XSS issues. — SecurityWeek
  4. North Korean 'ClickFake' Campaign UncoveredResearchers discover a North Korean campaign targeting Web3 professionals through fraudulent job interviews. — Infosecurity Magazine
  5. AWS Kiro Flaw ExploitedA vulnerability in AWS Kiro allows attackers to rewrite configurations and run code. — The Hacker News