🔔 Welcome back to Blumira Briefings, your essential security download! This week, Matt Warner, Mike Toole, Jake Ouellette, and Zoe Lindsey break down the latest security headlines with context you can actually use. 🔔

What We Cover This Week:

🩹 Cisco patches 10 issues, including 2 high-severity DoS and privilege escalation flaws 

🔑 184 million login credentials for major platforms exposed online

🇷🇺 Russia's Fancy Bear stepping up attacks on logistics and IT firms

 💻 BadSuccessor: Understanding a Windows Server 2025 vulnerability exploiting permission inheritence 

🤖 GitLab Duo prompt injection vulnerability, highlighting potential AI assistant security risks

Plus, Expert Insights On:

• Focusing on threat actor attribution vs. focusing on remediation
• Practical strategies for balancing AI assistant functionality with security
• The importance of monitoring AD permission changes and account creation
• The risk in using Outlook/email storage for sensitive information

📰 SOURCES: 

Cisco Patches: https://www.securityweek.com/cisco-patches-high-severity-dos-privilege-escalation-vulnerabilities/ 

Exposed Login Credentials: https://www.websiteplanet.com/news/infostealer-breach-report/ 

Fancy Bear Advisory: https://www.darkreading.com/cyberattacks-data-breaches/cisa-russia-fancy-bear-targeting-logistics-it-firms 

BadSuccessor Vulnerability: https://www.akamai.com/blog/security-research/abusing-dmsa-for-privilege-escalation-in-active-directory 

GitLab Duo Prompt Injection: https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo