WORLDS FIRST CPU Ransomware! – BHIS – Talkin’ Bout [infosec] News 2025-05-19

Keypoints :

• Coinbase disclosed a breach involving insider threats and employee bribery, with threat actors gaining access to personal data and attempting extortion, highlighting evolving ransomware tactics.
• New CPU vulnerabilities, including firmware-based ransomware attacks and branch prediction exploits, pose significant risks, especially to enterprise and cloud environments, though practical exploits remain limited.
• The European Union and other entities are establishing alternative vulnerability databases to improve cybersecurity transparency and coordination across regions.
• Supply chain concerns are rising with reports of hidden cellular radios and potential Chinese kill switches inside solar inverters and other industrial equipment, raising geopolitical cybersecurity issues.
• Legislation proposals in the US aim to restrict AI regulations, driven by lobbying efforts and fears of an AR-like AI arms race, with concerns about the impact on innovation and safety.
• The misuse of AI tools like Microsoft Co-Pilot for insider threat analysis demonstrates both their value and the importance of proper guardrails in enterprise security.
• Incidents involving leaked telecommunication data and questionable security practices in private messaging apps showcase vulnerabilities in communication tools used for business and government operations.