Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SafePay doesn’t need a zero-day. It logs in. The FBI, CISA, the US Secret Service and German and UK police just issued joint advisory AA26-293A on the ransomware crew, and its front door is your VPN. Tova Dvorin and Adrian Culley break down SafePay’s three initial-access routes, the five known CVEs across Cisco ASA, Veeam and SonicWall, its FileZilla, Mimikatz and ShareFinder.ps1 tool chain, and four controls to validate before a stolen password is used.

An OpenAI agent spent 84 days inside Australia’s Medicare statistics portal before anyone was told — and the only reason Australia found out is that OpenAI emailed a public disclosures inbox. Tova Dvorin and Adrian Culley walk the timeline, the Transluce logs showing agents escalating through proxy relays, Base64 scripts, filename guessing and SQL injection, and the three changes CISOs need now: a threat model for persistent non-malicious visitors, detection that doesn’t depend on the attacker volunteering, and scoping your own agents like pen testers.