Automated Tools to Assist with DShield Honeypot Investigations

https://isc.sans.edu/diary/Automated%20Tools%20to%20Assist%20with%20DShield%20Honeypot%20Investigations%20%5BGuest%20Diary%5D/32038

EchoLeak: Zero-Click Microsoft 365 Copilot Data Leak

Microsoft fixed a vulnerability in Copilot that could have been abused to exfiltrate data from Copilot users. Copilot mishandled instructions an attacker included in documents inspected by Copilot and executed them.

https://www.aim.security/lp/aim-labs-echoleak-blogpost

Thunderbolt Vulnerability

Thunderbolt users may be tricked into downloading arbitrary files if an email includes a mailbox:/// URL.

https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/