Cyber Insurance Data Gives CISOs New Ammo for Budget Talks

This SecurityWeek roundup covers multiple active threats and security trends: Vimeo confirmed a user and customer data breach with the ShinyHunters group demanding ransom; over 70 cloned Open VSX extensions are linked to GlassWorm malware distribution (sleeper extensions in extension repo); a new unpatched PhantomRPC privilege escalation technique in Windows allows a fake RPC server to impersonate services and elevate to SYSTEM; Robinhood systems were abused to send legitimate-looking emails leading to phishing sites; vulnerabilities in Zero Motorcycles and Yadea scooters pose physical safety/