Law enforcement and industry disrupt criminal infrastructure.

Researchers blame Iranian government for LA transit authority hack. Extortion group sends individuals to infiltrate organizations in person.

GitHub discloses breach of 3,800 internal code repositories.

CISA contractor exposed AWS GovCloud keys on GitHub. Researchers craft a kernel exploit on Apple's M5 chips, with help from Mythos.

OpenAI and others deal with fallout from TanStack supply-chain attack.

Disgruntled researcher discloses two Windows zero-days. Microsoft warns of critical zero-day in on-prem Exchange Servers.

ShinyHunters defaces Canvas portals during finals week.

CISA orders Federal agencies to patch Ivanti zero-day by Sunday. Progress Software urges customers to patch critical MOVEit flaw.

OpenAI and Anthropic brief Congress on cyber-capable AI models.

"Copy Fail" flaw leads to privilege escalation on Linux. FISA Section 702 gets another stopgap extension.