• Phishing Campaign Hides Lua Loader as TrueType Font File
• Scattered Spider members jailed over Transport for London hack that cost £29 million
• Modular macOS Stealer Uses Kill Loops to Force Password Entry
• Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
• CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance
• "Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed
• Romania’s land registry hit by cyber attack, data allegedly for sale
• SANS Warns of AI Governance Gap as Use by Security Teams Surges
• US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management
• Microsoft makes Windows SSO prompts easier to manage
• Phishing Campaign Abuses eCards to Deploy RMM Tools
• Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass
• Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks
• Progress Restores ShareFile Storage Zones Access After Security Warning
• Microsoft Patches 570 CVEs in Record Patch Tuesday
• Government Updates UK’s National Risk Register with Cyber Warnings
• US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors
• New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter
• Lidl Notifies Customers of Third-Party Data Breach

Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers