The latest AI doomsayer is China’s intelligence boss

A security news digest covering active exploitation of enterprise vulnerabilities, malware and phishing campaigns, supply-chain and account compromises, large data exposures, AI-assisted attacks, cryptographic and hardware attacks, and regulatory developments. The most urgent items include active exploitation of a critical GitLab flaw, three JFrog Artifactory vulnerabilities, Cisco IOS XR/Nexus issues, widespread credential phishing, ClickFix malvertising, and major healthcare and infrastructure incidents.