Espresso

Sign in Subscribe

Cybersecurity

Cyberattacks Surge: Optus, Hyatt, Coinbase Hit as AI Exploits, Zero-Days, and Credential Leaks Expose Millions

Cyberattacks Surge: Optus, Hyatt, Coinbase Hit as AI Exploits, Zero-Days, and Credential Leaks Expose Millions

TL;DR * Optus, Medibank, and Latitude Financial Hit by Cyberattacks, Exposing Millions of Australians' Data * Cyberattack on Poland’s Energy Sector Neutralized, Marking Most Serious Attempt in Years with No Service Disruption * CVE-2025-14533 Exploited in ACF Extended Plugin Allows Unauthenticated Admin Access Across 100K+ WordPress Sites * DOGE

Fake Malwarebytes ZIPs, Signed VS Code Stealers, and PDF Backdoors: How Trust, Not Zero-Days, Is Breaching Enterprises

Fake Malwarebytes ZIPs, Signed VS Code Stealers, and PDF Backdoors: How Trust, Not Zero-Days, Is Breaching Enterprises

TL;DR * Malwarebytes Campaign Tricks Users into Downloading Fake Software via DLL Sideloading, Stealing Crypto and Credentials * Cybercriminals Exploit Visual Studio Code Marketplace with Evelyn Stealer Extension to Steal Source Code and Cloud Tokens * Microsoft Enforces Intune Security Policies, Blocking Business Email Access for Non-Compliant Apps Since Jan 19,

Microsoft’s Patch Breaks Windows 11 Shutdowns & Logins—While a Malware Panel Gets Hacked by a <script> Tag

Microsoft’s Patch Breaks Windows 11 Shutdowns & Logins—While a Malware Panel Gets Hacked by a <script> Tag

TL;DR * Microsoft releases emergency out-of-band patch for Windows 11 Secure Launch shutdown and Remote Desktop authentication failures * XSS vulnerability in StealC panel enables mass credential theft, IP harvesting, and session hijacking across 5,000+ logs 🛠️ Microsoft’s Patch Made Windows 11 Refuse to Shut Down—And Then

Verizon’s $20 Credit After 10-Hour 911 Outage & Google’s Silent Earbud Hack: When Convenience Kills Security

Verizon’s $20 Credit After 10-Hour 911 Outage & Google’s Silent Earbud Hack: When Convenience Kills Security

Verizon’s network crashed for 10 hours — 911 services degraded, $600M lost, and their ‘solution’? A $20 credit. Meanwhile, Google’s Fast Pair bug lets hackers eavesdrop on your earbuds… silently. No password. No alert. Just betrayal. Are your devices safe? #Cybersecurity #VerizonOutage #GoogleFastPair #BluetoothHack #Privacy #SecurityFail Verizon’s $20

China-linked APT UAT-8837 Exploits Zero-Day to Hijack Critical Infrastructure; Iran Spoofs GPS to Sabotage Starlink; ICE Leak Exposes Surveillance Machine; AI Code Agents Generate 69 Flaws; Copilot Leaks Chat History via One-Click URL

China-linked APT UAT-8837 Exploits Zero-Day to Hijack Critical Infrastructure; Iran Spoofs GPS to Sabotage Starlink; ICE Leak Exposes Surveillance Machine; AI Code Agents Generate 69 Flaws; Copilot Leaks Chat History via One-Click URL

TL;DR * UAT-8837 APT actor exploits CVE-2025-53690 zero-day to compromise North American critical infrastructure via credential harvesting and Earthworm malware * Iranian state actors jam Starlink terminals using GPS spoofing, disrupting satellite connectivity for 24 minutes per session and degrading bandwidth to 10% in targeted regions * ICE

Microsoft Launches M365 Security Baseline Mode; DHS Leaks 4,500 Agent Records

Microsoft Launches M365 Security Baseline Mode; DHS Leaks 4,500 Agent Records

TL;DR * Microsoft 365 enables Security Baseline Mode to automatically apply default policies across 26 SharePoint sites, reducing manual configuration gaps and improving auditability * DHS leaks 4,500 ICE and Border Patrol employee records in largest-ever staff data breach, exposing identities of 2,000 active agents and triggering nationwide

Global-e Breach Exposes Crypto Wallets via API Flaw; Microsoft Offers Copilot Uninstall Tool; UK Criminalizes AI Deepfakes; Nigeria Mandates Crypto-ID Linkage

Global-e Breach Exposes Crypto Wallets via API Flaw; Microsoft Offers Copilot Uninstall Tool; UK Criminalizes AI Deepfakes; Nigeria Mandates Crypto-ID Linkage

TL;DR * Global-e third-party breach compromises 50,000+ customer orders, exposing Ledger wallet data through compromised vendor system * Microsoft enables enterprise admins to uninstall Copilot via documented Group Policy on Windows 11 Insider Preview * UK moves to criminalize AI-generated sexual deepfakes and revokes X’s self-regulatory