Espresso

Sign in Subscribe

Cybersecurity

💣 581 CVEs Per Codebase: Global Supply Chain Security Collapses as Two-Thirds of Enterprises Face Active Compromise

💣 581 CVEs Per Codebase: Global Supply Chain Security Collapses as Two-Thirds of Enterprises Face Active Compromise

TL;DR * Open source dependency vulnerabilities double: median CVEs per codebase rises from 280 to 581, 65% suffer supply chain attacks * Cortex XDR Live Terminal vulnerability (CVE-2026-0323-2400) allows cross-tenant C2 redirection via WebSocket hijack * Remington.bg breached, exposing 150,000+ customer and order records in Bulgaria

Medusa Ransomware: North Korea's $15M Hospital Shakedown

Medusa Ransomware: North Korea's $15M Hospital Shakedown

TL;DR * Lazarus Group deploys Medusa ransomware against U.S. healthcare and Middle East targets, leveraging Blindingcan and ChromeStealer * ShinyHunters breach CarGurus, compromising 12.6 million accounts with personal data including addresses and phone numbers * CISA mandates federal agencies to inventory and decommission unsupported edge devices within 90 days under

$9M Breach: AI Script Kiddies Weaponize Default FortiGate Passwords in Enterprise Slaughter

$9M Breach: AI Script Kiddies Weaponize Default FortiGate Passwords in Enterprise Slaughter

TL;DR * Hellcat group exfiltrated 44GB of sensitive data from Ascom’s ticketing system via AI-compromised FortiGate devices * Let’s Encrypt adopts DNS-PERSIST-01 for wildcard certificate issuance with reusable validation records * Google Blocks 255,000 Apps from Play Store in 2025 for Excessive Sensitive Data Access, Bans

64,000% ROI: AI Phishing Factory Nets $40M on $62K Cloud Spend

TL;DR * RedVDS AI-powered fraud infrastructure dismantled by Microsoft DCU, disrupting 2,600 VMs sending 1M phishing emails daily * DynoWiper malware linked to Russian APT Sandworm targeted Polish energy infrastructure in late December 2025 * Microsoft Copilot AI summarized confidential emails despite DLP policies, bug CW1226324 active since January 21,

10TB Daily Flight Data Redesigns Planes Mid-Air: Airbus & Palantir's AI Leap

10TB Daily Flight Data Redesigns Planes Mid-Air: Airbus & Palantir's AI Leap

TL;DR * Palantir Extends Airbus Deal to Enhance Aircraft Design Efficiency * U.S. Air Force Plans New Livery for VC-25B Presidential Aircraft * Dutch Defense Secretary Claims F-35 Software Can Be 'Jailbroken' Due to US Dependency 🔄 10TB/Day Flight Data Fuels AI-Driven Aircraft Redesign – Global Cybersecurity

Tribal & County Networks Held Hostage: 57,000 Citizens in Digital Darkness

Tribal & County Networks Held Hostage: 57,000 Citizens in Digital Darkness

TL;DR * Ransomware attack disrupts tribal networks in Oklahoma, 10 BTC ransom demanded * City of Huntington County activates cybersecurity response after suspicious network activity 🔥 Rhysida Ransomware Auction: 10 BTC Demand Paralyzes Tribal Operations 10 BTC ransom demand on Oklahoma tribal networks. 12,000 citizens left in the dark for 6