The Critical Stack

JadePuffer-linked attackers hijacked Azure service principals to delete storage, databases, key vaults and even recovery locks — while Unit Forty-Two's new incident response report finds identity weaknesses in nearly ninety percent of cases. Plus a second Polish healthcare breach in weeks, and Microsoft's push to govern the a-i agents now running loose across the enterprise.

A new botnet called Carbonato is installing a-i agent frameworks on exposed Docker hosts and worming outward, while Astrana tells the s-e-c that attackers simply spoofed its own phone number. Meanwhile, Washington still has no answer for who is liable when an autonomous agent does the hacking — and investors are already funding the runtime controls.

No marquee zero-day today — instead, a vendor told the world to switch off its servers for six hours on nothing but federal threat intel. Plus North Korea's three hundred fifty-one point six million dollar raid on Bitget, the seventy-two-hour clock coming for critical infrastructure, and why nobody can actually compare the a-i security numbers vendors are publishing.

A pre-auth SonicWall exploit chain lands in the k-e-v catalog while a South Carolina health system shutters eighty-three facilities. Plus: the seventy-two hour clock on incident reporting is about to become law, and the first fully autonomous AI ransomware operation gives vendors a threat to sell against.

Attackers weaponized a critical WordPress bug the day it was patched, Revolut handed passports and k-y-c selfies to a threat actor impersonating a government agency, and Cisco's maximum-severity Identity Services Engine bypass is still being exploited with no workaround. Plus: the c-i-r-c-i-a final rule lands this month, and defenders start fighting agents with agents.

A maximum-severity, actively exploited flaw in Arista's VeloCloud Orchestrator tops a brutal day of zero-days, while F5 and VMware vCenter demand same-day patching. Plus: ShinyHunters hijacks rival gang Cl0p's own leak site, SEE-suh retires its weekly vulnerability bulletin, and Microsoft dismantles a phishing platform that burned twelve thousand accounts.

Microsoft's record Patch Tuesday hits its federal deadline today, but the story underneath it is a c-v-s-s ten point zero authentication bypass in Cisco Secure Firewall Management Center that Sandworm and Qilin affiliates are exploiting right now. Plus: one hundred fifty-three million driver's license scans for sale, Mandiant's negative time-to-exploit, and Palo Alto's five hundred million dollar bet on agentic remediation.

A c-v-s-s ten point zero file-read flaw in GitLab went from patch to in-the-wild probing in under a day, and Sysdig documented the first ransomware intrusion planned and executed end to end by an a-i agent. Plus: the CIRCIA final rule lands this month, and Wall Street calls a top on the security trade.

A ten-out-of-ten Cisco Identity Services Engine zero-day is under active attack with its federal patch deadline already behind us, Revolut got robbed by a fake government data request, and Amazon's honeypots clocked an autonomous a-i agent running a full attack chain in twelve minutes. Plus: the e-u's incident-reporting clock is now officially running.

Cisco closes a brutal week with two exploited zero-days, including a Secure Email Gateway flaw where simply receiving a message hands an attacker root. Plus: a dark-web service selling more than one hundred fifty-three million driver's license scans, nist's plan to rebuild the National Vulnerability Database for the AI era, and reports that Palo Alto Networks is circling SentinelOne for up to ten billion dollars.