A China-aligned group distributes targeted phishing emails with malicious ZIP attachments in Czechia and Taiwan to gain access to government, research institutions, and financial sector organizations.
Barely perceptible acoustic signals embedded in audio files can covertly manipulate AI speech models into data exfiltration or network access, while conventional security mechanisms fail to detect 70–93 percent of attacks.
Vodafone refused to pay Lapsus$ extortionists, prompting the group to publish source code and infrastructure documentation—confirming security leadership’s stance against ransom payments.
Microsoft authentication services have experienced a global outage, preventing MFA configuration and access to the central portal for sign-in activity management.
European regulation through the EU AI Act and NIS2 Directive shapes digital sovereignty requirements and demands new governance and security structures from CDOs.
Gentlemen uses autonomous network propagation to roll out encryption across multiple systems simultaneously, overwhelming conventional detection and containment mechanisms.
CISOs must shift their perspective from IT protection to business resilience and align the pace of their security measures with threat actors and business development.
Cyber resilience must be planned across ecosystems rather than within individual organizations, as dependencies create attack vectors and propagation pathways for security incidents.
TDoS attacks on SIP and cloud telephony require CISOs to expand threat monitoring to voice communication systems with separate detection and mitigation strategies.
