Daily Recap, Funding and deal activity included Oligo raising $60 million for runtime security, while Visa agreed to acquire BioCatch for $2.4 billion to bolster identity and fraud defenses. Key incidents covered hotel Wi‑Fi attacks targeting Microsoft 365 via custom malware, account takeover risk from Pass-ta-key against Google-synced passkeys, and active exploitation of N-able N-central and SonicWall SMA 1000 flaws alongside ransomware and data-leak follow-ons. #Oligo #RuntimeSecurity #Visa #BioCatch #HotelWiFi #Microsoft365 #Pass-ta-key #GooglePasskeys #N-able #N-central #SonicWallSMA1000 #INC_Ransomware #ExfilSquad #LiechtensteinRegistry #RiverBank
Funding & Deals
- Oligo raised $60 million to expand runtime security capabilities for modern applications – Runtime Security
- Visa will acquire fraud-intelligence firm BioCatch for $2.4 billion, signaling a major push into identity and fraud defense – BioCatch Deal
AI & Privacy Policy
- The Senate is set to debate a package of bills covering privacy, AI, and kids’ safety online – Senate Debate
- A public-interest coalition is urging Congress to investigate the OpenAI and Hugging Face hack, raising concerns about AI ecosystem security – AI Hack Probe
- Varonis introduced Agent IBAC to keep AI agents within intended boundaries and reduce misuse – Agent IBAC
Malware & Account Theft
- Attackers used custom malware in hotel Wi‑Fi attacks to breach Microsoft 365 accounts – Hotel Wi-Fi
- Pass-ta-key attacks can hijack Google-synced passkeys, putting passkey-protected accounts at risk – Pass-ta-key, Password Manager
- The DOUBLECUP ClickFix service hides malware inside browser cache images to evade detection – DOUBLECUP
- A fake Roblox Xeno script launcher is spreading infostealer and RAT malware to gamers – Fake Roblox
- 18 malicious npm packages were found delivering a cross-platform RAT to users of an Alibaba tool – Malicious npm
Exploits & Vulnerabilities
- N-able warned that a critical N-central authentication-bypass flaw is being actively exploited in attacks – N-central Flaw
- INC Ransomware has emerged as a dominant actor exploiting SonicWall SMA 1000 flaws in ongoing campaigns – SonicWall Exploit
Ransomware & Breaches
- River Bank said hackers deleted stolen data after a ransomware attack, highlighting recovery uncertainty – River Bank
- ExfilSquad leaked details of more than 100,000 UK police officers and staff, exposing sensitive law-enforcement data – UK Police Leak
- A cyberattack hit Liechtenstein‘s register of people behind companies and foundations, affecting a key corporate registry – Liechtenstein Registry
Critical Infrastructure & Public Sector
- New York awarded $9 million to strengthen cybersecurity at 153 water systems, boosting resilience for public utilities – Water Systems
Industry & Events
- Black Hat USA 2026 vendor announcements highlighted new products and security trends across the industry – Black Hat Summary
- A CISO conversation with Russ Kirby focused on how passion can help counter burnout in cybersecurity leadership – CISO Talk