Daily Briefing for 07.30.25

At a glance.

• Minnesota activates National Guard following St. Paul cyberattack.
• Orange discloses cyberattack that caused disruptions for French customers.
• Vibe coding platform Base44 patches critical flaw.

Minnesota activates National Guard following St. Paul cyberattack.

Minnesota has activated its National Guard in response to a disruptive cyberattack that hit the City of St. Paul on Friday, Reuters reports. The incident forced the city to shut down many of its digital systems, and online payment systems remain offline. 911 and emergency systems are operational. St. Paul Mayor Melvin Carter declared a state of emergency, calling the incident a "deliberate, coordinated, digital attack." The nature of the incident hasn't been disclosed, but Reuters says the city's response suggests ransomware was involved.

Governor Tim Walz said in an executive order signed yesterday, "This cyberattack persisted through the weekend, causing significant disruptions and impairing St. Paul’s ability to provide vital services. St. Paul officials have been working around the clock since discovering the cyberattack, closely coordinating with Minnesota Information Technology Services and an external cybersecurity vendor. Unfortunately, the scale and complexity of this incident exceeded both internal and commercial response capabilities. As a result, St. Paul has requested cyber protection support from the Minnesota National Guard to help address this incident and make sure that vital municipal services continue without interruption.

Orange discloses cyberattack that caused disruptions for French customers.

French telecommunications giant Orange detected a cyberattack last Friday that resulted in disruptions that primarily affected French customers, BleepingComputer reports. Orange stated, "On Friday, July 25, the Orange Group detected a cyberattack on one of its information systems. Immediately alerted, with the support of Orange Cyberdefense, the teams mobilized fully to isolate the potentially affected services and limit the impact."

The company says it has "no evidence to suggest that any customer or Orange data has been extracted," though the investigation is ongoing.

Vibe coding platform Base44 patches critical flaw.

Researchers at Wiz have discovered a critical vulnerability in AI coding platform Base44 that could allow unauthorized access to private applications built by its users. Wiz explains, "The vulnerability we discovered was remarkably simple to exploit - by providing only a non-secret app_id value to undocumented registration and email verification endpoints, an attacker could have created a verified account for private applications on their platform. This effectively bypassed all given authentication controls that Base44 provided, including Single Sign-On (SSO), granting full access to what were intended to be private enterprise applications and the sensitive data they might have contained."

Base44 has fixed the flaw, and its parent company Wix says there's no evidence of past abuse.