Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Compliance & Regulation

EU Drafts Tough New Rules for High‑Risk AI Security

EU Drafts Tough New Rules for High‑Risk AI Security

The European Commission has released a draft AI Act amendment that obligates vendors of high‑risk artificial‑intelligence systems to conduct regular risk assessments, publish detailed transparency documentation, and adhere to a single, EU‑wide breach‑notification protocol. The framework targets AI applications whose failure could affect safety, fundamental rights,

Vulnerabilities & Exploits

Microsoft Releases Critical Exchange Server Patch to Close ProxyLogon Gaps

Microsoft Releases Critical Exchange Server Patch to Close ProxyLogon Gaps

Microsoft has published a cumulative update for on‑premises Exchange Server that finally patches the remaining ProxyLogon flaws first disclosed earlier this year. The update seals the chain of vulnerabilities that allowed unauthenticated attackers to execute code remotely and harvest mailboxes, and it is now available via the normal Windows

AI Security & Threats

OpenAI Deploys New Malicious‑Use Detection Policy to Shield Defenders

OpenAI Deploys New Malicious‑Use Detection Policy to Shield Defenders

OpenAI’s latest blog post announces a formal Malicious‑Use Detection Policy that pairs automated monitoring of its generative AI models with collaborations from leading cybersecurity vendors. The program continuously scans for patterns indicative of weaponized prompts, deep‑fake generation, or phishing kit creation, and it commits to publishing monthly

AI Security & Threats

AI‑Crafted Code Injections Surge, Threat Actors Automate Exploits

AI‑Crafted Code Injections Surge, Threat Actors Automate Exploits

Threat actors are now harnessing large language models (LLMs) to auto‑generate code‑injection payloads aimed at vulnerable web applications. By feeding the model details about target frameworks, libraries, and configuration files, the AI produces ready‑to‑use exploit scripts that are customized for each environment. This eliminates the manual

Vulnerabilities & Exploits

Chinese APT Hijacks DevOps Updates to Steal Aerospace IP

Chinese APT Hijacks DevOps Updates to Steal Aerospace IP

A Chinese state‑sponsored APT group infiltrated the software‑distribution pipeline of a popular DevOps platform, replacing legitimate update packages with malicious binaries. These backdoored components were signed with forged code‑signing certificates, allowing them to pass integrity checks and be automatically installed on victim systems. The compromised updates were

Vulnerabilities & Exploits

Active Exploitation of FortiOS Zero‑Day Threatening Healthcare and Manufacturing

Active Exploitation of FortiOS Zero‑Day Threatening Healthcare and Manufacturing

A previously unknown zero‑day flaw in Fortinet’s FortiOS VPN module is being weaponized in the wild. The vulnerability allows unauthenticated attackers to execute arbitrary code on the firewall’s operating system, giving them full control over the device and any network segments it protects. Threat actors have linked

AI Security & Threats

AI‑Powered Deepfake Phishing Targets Execs with Fake Audio‑Video Scams

AI‑Powered Deepfake Phishing Targets Execs with Fake Audio‑Video Scams

A wave of phishing campaigns is now leveraging generative AI to produce convincing deepfake audio and video clips that mimic senior executives. Attackers embed these multimedia forgeries in emails, messaging platforms, or video calls, prompting recipients to approve urgent wire transfers or disclose privileged credentials. The synthetic media is so

Malware & Ransomware

Azure AD Breach Fuels Ransomware via Trusted M365 Channels

Azure AD Breach Fuels Ransomware via Trusted M365 Channels

Attackers compromised Azure Active Directory accounts and harvested authentication tokens, allowing them to bypass multi‑factor authentication. Using these valid tokens, they accessed Microsoft 365 services such as SharePoint and OneDrive and uploaded malicious executables that were automatically synchronized to user devices. The ransomware payload was then executed directly from