Know what changed.
Trace why it matters.

CISA published “CISA 2030: Defend, Harden, Prevail,” a strategy focused on leading cyber defense, protecting critical infrastructure, and building resilience against attacks. The strategy’s objectives include integrating state, local, and industry cyber defense; protecting operational technology; improving software-security guidance; and assessing emerging technologies.

CISA’s acting director said adversaries are becoming more sophisticated and that strong defenses do not guarantee intrusions will be eliminated; he emphasized rapid detection, eviction, and continuity of critical operations after compromise.

An automated campaign uses stolen GitHub tokens to plant workflows that print repository secrets into GitHub Actions logs, downloads those logs, and then deletes the workflow runs. According to analysis by cloud security company Wiz, the attacks have succeeded in private repositories and GitHub Enterprise environments.

Repository automation and log access create an operational boundary for secret handling that deserves the same scrutiny as source access.

Wasmtime maintainers say two critical flaws could allow a malicious WebAssembly module to escape the sandbox intended to contain it. Exploitation requires a vulnerable Wasmtime build and an attacker-controlled WebAssembly module; one flaw affects only ARM64 systems.

Sandboxing is a meaningful boundary only when deployments also control untrusted modules and vulnerable runtime builds.