While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.

Starting with the 2028 Wiretap Report, which will be published in 2029, the judiciary will include data on network investigating techniques.

The initiative mandates the creation of an AI cybersecurity officer role within every state agency and establishes an AI cyber defense program housed in the state’s Cybersecurity Integration Center.

These "dropcatch" domains are attractive to threat actors because they retain trust, backlinks, and web traffic from their previous legitimate use, making them appear more favorable to security systems than new registrations.

The vulnerability, identified as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a flaw in macOS' screen sharing capability.

ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.

The incident, which occurred in July, was disclosed by RingCentral as the result of a sophisticated social engineering campaign.

The vulnerabilities added to the KEV catalog include a heap inspection flaw in Cisco Secure Firewall (CVE-2026-20349), a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock (CVE-2026-68820), and a critical SQL injection vulnerability in Metabase (CVE-2026-72898).

The crackdown, which involved 411 searches, targeted call centers where operators impersonated bank officials, brokers, and law enforcement.

Apple's threat notifications are triggered by the detection of mercenary spyware, which is described as sophisticated, expensive, and aimed at a small number of individuals, often journalists, activists, politicians, and diplomats.