If you're not using AI to attack your own systems, your adversaries will

A security news digest covering actively exploited vulnerabilities, ransomware and extortion, credential theft, software supply-chain compromises, cloud and third-party data breaches, phishing and OAuth abuse, AI-assisted attacks and prompt injection, privacy issues, and security patches affecting products including TrueConf, Cisco Secure Workload, Ray, Apple platforms, npm, and Rust crates. The most urgent themes are active exploitation of vulnerabilities, malicious package poisoning, exposed credentials, and threats to critical infrastructure.