The Mandos Brief gives you a quick, 3-minute rundown of the week's top cybersecurity updates. It's your go-to source for staying informed and cyber-aware, fast.
Auto-Color backdoor exploits SAP NetWeaver via CVE-2025-31324 targeting US chemicals company. Cursor IDE vulnerability enables full RCE through prompt injection attacks.
Scattered Spider resurfaces with $592M in damages across 11 major attacks. Nigerian cybercrime ring targets aviation execs with six-figure BEC losses.
Critical NVIDIA vulnerability enables container escape with 3-line Dockerfile. Amazon launches enterprise AI agent platform. Scattered Spider causes $592M damage across 11 attacks.
Major breaches hit McDonald's hiring platform and Louis Vuitton UK. Researchers discover systematic LLM agent vulnerabilities.
Attackers increasingly weaponize legitimate tools in 84% of incidents. Ransomware recovery costs plummet to $1.53M. Financial sector faces strategic DDoS campaigns with 23% spike in app-layer attacks.
Major development platforms compromised via extensions marketplace. AI systems vulnerable to data exfiltration attacks. Global leaders rank cyber as top business threat.
Cloudflare mitigates largest DDoS attack ever recorded. Salesforce Industry Cloud exposes 20 configuration vulnerabilities. Cyentia IRIS 2025 Report Reveals Sixfold Increase in Security Incidents with Median Losses Rising to $3 Million
Zero-click iPhone exploit hits journalists. 80K+ Microsoft accounts compromised. Enterprise AI governance fails across industries.
Palo Alto's AI executes ransomware in 25 minutes. Fake Cloudflare CAPTCHAs deliver malware while Meta automates security reviews.
Join security leaders who receive knowledge and resources on becoming a more effective security leader. One actionable newsletter every week.
Trusted by security professionals at
