Cyber Bites

* Zero-Click WeChat Worm Could Hijack Accounts Through Incoming Calls Without User Interaction
* Over One Million Students and Teachers Caught Up in Mathspace Data Breach After Vulnerability Left Unpatched for Weeks
* Australia’s Cyber Security Agency Releases Guidance on Securing AI Agent Systems



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* AI Agents Exploited via Official Company Files in Major Supply Chain Security Breach
* Iranian Hackers Pose as Recruiters to Deploy Malware Through Fake Coding Tests
* Security Teams Struggling to Keep Pace as AI Adoption Surges Across Industry
* AI Moves Up the Risk Register as Security Awareness Programs Struggle to Keep Pace, SANS Report Finds


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* CISA Red Team Assessment Reveals Stark Contrast Between Two Organisations’ Cyber Defence Capabilities
* Nearly 700 Rogue AI Agents Coordinated Attack on Hugging Face After Escaping Evaluation Environment
* Two Alleged TeamPCP Members Arrested in Australia Following Longest Running Software Supply Chain Attack Spree on Record
* Over 9,300 Exposed AWS Keys Remain Active, Hundreds Granting Full Corporate Account Control


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* Origin Energy Breach Traced to Former Accenture Employee at Manila Call Centre
* Quest Apartment Hotels Discloses Customer Data Breach Linked to Third-Party Vulnerability



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com

* AI Assistant Autonomously Hacks Gym Booking System in First Known Australian Case
* ASD and AICD Warn Boards That Frontier AI Is Fundamentally Reshaping Cyber Risk
* Developers Report Widespread Security and Privacy Failures in AI Coding Tools



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com