MICROSOFT PATCHES DEFENDER ZERO-DAY FLAW

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) in water and wastewater systems across the country.

Cybercriminals are increasingly deploying AI-assisted malware and exploiting emerging technologies, according to ESET's latest threat report. The security firm identified a sharp rise in malicious AI applications alongside record quishing attacks and ransomware designed to disable defenses.

Meta's smart glasses can be defeated with a simple sticker, allowing users to record without alerting nearby people. The anti-creep feature, designed to notify bystanders of recording, is trivially easy to bypass.

Russian-linked threat actors are actively exploiting a maximum-severity vulnerability in Microsoft Exchange servers, gaining persistent access that can survive credential rotation and system reimaging.