In partnership with
⏱️ ≈ 7-minute read
Editor’s Note: If this week’s theme feels like “everything is fragile and AI is helping,” that’s not paranoia, it’s threat intel. Firewalls are getting flipped, regulators are sharpening knives, and attackers are using AI like it’s a cheat code. Let’s get into it.
📜 Table of Contents
📌 Big News
Firewalls under automated attack; the EU tightens the cybersecurity screws🚨 Can’t Miss
Zero‑days surge, password managers get impersonated, space agencies leak data🤖 AI in Cyber
AI‑powered cybercrime, malware built by machines, and Copilot gets tricked🧪 Strange Cyber Story
Why a stop sign might be able to hack a robot
🚨 Big Stories
🔥 FortiGate Firewalls Targeted by Automated Attacks
Intro: If you assumed your firewall was the last thing attackers could quietly reconfigure, this story would like a word.
What Happened: Researchers observed automated attacks targeting Fortinet FortiGate firewalls by exploiting FortiCloud SSO, allowing attackers to modify firewall configurations at scale. The campaign appears designed for speed and volume, not precision.
Why It’s Important: Firewalls sit at the very edge of enterprise trust. Once an attacker controls policy rules, segmentation and detection assumptions collapse fast.
The Other Side: Fortinet has issued guidance, but many organizations still rely on cloud‑linked management without fully locking down identity controls.
👉 Takeaway: Identity security is now firewall security so treat it that way.
TL;DR: Automated attacks are flipping firewall rules by abusing cloud authentication. Patch, audit, and lock down SSO immediately.
Further Reading: The Hacker News
Nearly 30% of zero‑day vulnerabilities are now exploited before public disclosure, proving attackers read the internet faster than defenders read patch notes. (Source: VulnCheck)🏛️ EU Proposes Sweeping Cybersecurity Overhaul
Intro: Europe is done asking nicely about supply chain risk.
What Happened: The EU announced plans to overhaul its cybersecurity framework, expanding ENISA’s authority and limiting the use of “high‑risk” foreign suppliers in critical infrastructure and telecom environments.
Why It’s Important: This signals tighter regulatory pressure on vendors and enterprises alike, with ripple effects far beyond EU borders.
The Other Side: Critics warn the rules could increase costs and complicate procurement but Brussels seems comfortable with that trade‑off.
👉 Takeaway: Cybersecurity is now an economic and geopolitical policy lever.
TL;DR: The EU is hardening its cyber posture and shrinking supplier flexibility in the name of resilience.
Further Reading: BleepingComputer
Introducing the first AI-native CRM
Connect your email, and you’ll instantly get a CRM with enriched customer insights and a platform that grows with your business.
With AI at the core, Attio lets you:
Prospect and route leads with research agents
Get real-time insights during customer calls
Build powerful automations for your complex workflows
Join industry leaders like Granola, Taskrabbit, Flatfile and more.
🔥 Can’t Miss
☁️ Cloudflare WAF Zero‑Day Bypass
A zero‑day vulnerability allowed attackers to bypass Cloudflare’s Web Application Firewall protections and reach backend systems. While patches are rolling out, the scale of Cloudflare’s footprint makes this one especially uncomfortable.
👉 Key takeaway: Even security infrastructure needs defense‑in‑depth.🔐 LastPass Flags Sophisticated Phishing Campaign
Attackers impersonated LastPass using fake “backup request” emails, preying on user trust in a security brand. The campaign highlights how branding remains a powerful phishing weapon.
👉 Key takeaway: Security vendors are now prime phishing bait.🧭 Global Cyber Vulnerability Enumeration Launches
A new global vulnerability enumeration initiative aims to supplement, or compete with, the CVE system. It’s early days, but fragmentation could complicate vulnerability tracking.
👉 Key takeaway: More standards don’t always mean more clarity.🛰️ ESA Data Leak Exposes Hundreds of GB
The European Space Agency suffered multiple breaches resulting in leaked credentials and massive data exposure on dark web forums. Aerospace is no longer a niche target.
👉 Key takeaway: If it’s strategic, it’s a target.🧨 Zero‑Day Exploits Surging Before Disclosure
Nearly a third of vulnerabilities are now exploited before public disclosure, shrinking defender reaction time to near zero. Attackers are winning the speed race.
👉 Key takeaway: Assume exploitation happens before advisories drop.
Close more deals, fast.
When your deal pipeline actually works, nothing slips through the cracks. HubSpot Smart CRM uses AI to track every stage automatically, so you can focus on what matters. Start free today.
🤖 AI in Cyber
🦾 AI Supercharges Attacks in Cybercrime’s New ‘Fifth Wave’
Threat actors are using AI to scale phishing, automate reconnaissance, and evade detection faster than traditional tooling allows. This marks a shift from experimental misuse to operational dependence.
👉 Key takeaway: AI is now a force multiplier for attackers.🐍 VoidLink Malware Built with AI Assistance Hits 88,000 Lines
Researchers uncovered a massive Linux malware framework reportedly built with AI‑assisted coding. The result: faster development and frightening modularity.
👉 Key takeaway: Malware development has officially entered the AI era.🎯 Prompt Injection Attack on Microsoft Copilot Demonstrated
A proof‑of‑concept showed how prompt injection could manipulate Microsoft Copilot to expose or mishandle sensitive data. Productivity AI just gained a new attack surface.
👉 Key takeaway: AI tools inherit trust and attackers exploit it.🧠 AI Cybersecurity Predictions Show Deep Risk Shift
Industry forecasts now rank AI‑driven vulnerabilities among the fastest‑growing enterprise risks. Governance and security controls are lagging adoption.
👉 Key takeaway: If you deploy AI, you own its risk.
🧟♂️ Strange Cyber
🛑 AI Misleading Text Could Hijack Robots
Intro: Sometimes hacking doesn’t require code — just a sign.
What Happened: Researchers demonstrated that misleading physical‑world text can manipulate AI‑enabled robots and autonomous systems, tricking perception models into dangerous behavior.
Why It’s Important: This blurs the line between cyber and physical security, especially for autonomous vehicles and robotics.
The Other Side: These attacks require proximity, but as autonomy spreads, so does the risk.
👉 Takeaway: AI can be hacked with reality itself.
TL;DR: Adversarial inputs aren’t just digital anymore, the real world is part of the attack surface.
Further Reading: TechXplore
Enjoying Exzec Cyber? Forward this to one person who cares about staying ahead of attacks
Hate everything you see or have other feedback? Reply back to this email!