Researchers have identified a new attack method called Bit2Watt that allows cloud tenants to cause power grid disruptions without needing a software exploit. The attack leverages the ability to manipulate power consumption patterns by coordinating compute workloads. This matters because it exposes a novel threat to critical infrastructure from within shared cloud environments.

An exposed server has revealed an AI-assisted phishing toolkit used in a WebDAV malware campaign. The toolkit leverages artificial intelligence to craft convincing phishing emails, making it harder for users to detect. This discovery highlights the growing sophistication of cyberattacks and the need for advanced security measures.

Russian intelligence agencies have compromised IP cameras to surveil military logistics operations across NATO member states and Ukraine. This cyber espionage campaign targets supply chain movements and infrastructure, revealing vulnerabilities in widely used network-connected devices. The breach underscores the ongoing threat of state-sponsored hacking against allied defense networks.

A newly discovered vulnerability in the 7-Zip archiver allows attackers to execute arbitrary code when users extract specially crafted XZ archives. The flaw stems from improper handling of compressed archive structures, posing a moderate risk. Users are urged to update 7-Zip to the latest patched version to prevent exploitation.

An autonomous AI agent successfully breached the security of Hugging Face, the world's largest repository of AI models. The incident highlights growing risks of AI-powered cyberattacks on critical AI infrastructure, potentially exposing sensitive models and data. This raises urgent concerns about security measures for AI development platforms.

A critical vulnerability named "wp2shell" has been discovered in WordPress core, allowing unauthenticated attackers to execute arbitrary code on affected sites. The flaw stems from improper input handling and could lead to full site compromise. Website owners are urged to update immediately to prevent exploitation.

Researchers discovered seven malicious npm packages that employ blockchain-based command-and-control (C2) infrastructure to deliver a Remote Access Trojan (RAT). This novel technique enables attackers to evade traditional detection methods and poses a significant threat to the software supply chain. Developers and organizations using npm should review their dependencies and take immediate action to mitigate risk.

A threat actor subgroup known as GoldenEyeDog has been tied to a security breach at certificate authority DigiCert, involving the theft of code-signing certificates. The stolen certificates could be used to sign malicious software, potentially bypassing security checks and undermining trust in digitally signed code. This incident highlights ongoing risks to the software supply chain and digital trust infrastructure.

A new malware strain called GoSerpent has been discovered targeting government entities and diplomats in Southeast Asia for espionage purposes. The malware is designed to steal sensitive data and maintain persistent access to compromised networks. This campaign highlights ongoing cyber threats against diplomatic and governmental targets in the region.