The Mandos Brief gives you a quick, 3-minute rundown of the week's top cybersecurity updates. It's your go-to source for staying informed and cyber-aware, fast.
Samsung Galaxy zero-day exploited by LANDFALL spyware for surveillance across Middle East. Social engineering attacks surge 1,450% in H1 2025 with breakout times under 60 minutes.
100,000 WSUS exploitation attempts in 7 days demand immediate patching. CISOs running 25+ security tools face 50% higher incident rates. Entry-level cybersecurity roles see 5,000 applications per position as market contracts.
Self-propagating GlassWorm worm harvests credentials from 49 crypto wallets using blockchain C2 infrastructure. CISO salary discussion reveals $161K university role versus $250-300/hour consulting opportunities amid market challenges.
Only 6% of executives confident against attacks despite investment surges. UNC5342 exploits Ethereum smart contracts for JADESNOW malware delivery through fake job interviews targeting crypto developers.
Ivanti left 13 vulnerabilities unpatched until March 2026 after ZDI disclosure. Anthropic research shows just 250 poisoned documents can backdoor LLMs of any size. Half of enterprises face direct financial losses from network failures blocking AI initiatives.
Cloud account compromises jumped from 16% to 46% in five years. North Korean IT workers now use stolen developer identities to infiltrate western companies. Financial damage over $200K doubled as hybrid environments reach 77% adoption.
Enterprise AI usage exploded 200% while organizations unknowingly run 320 Shadow AI apps. Cisco zero-days target government networks as state actors deploy reboot-surviving malware.
Ransomware payments dropped to $115K median but hit 44% of all breaches. Cybersecurity pros can't find jobs despite 10+ years experience.
AI agents now exploit zero-days in under 10 minutes while energy sector attacks surge 586%. Web3 hackers earn millions as traditional security salaries lag behind.