Klue supply chain attack threatens hundreds of Salesforce customers

🚨 ACTIVE EXPLOITS & INCIDENTS

Klue Investigating Supply Chain Attack Targeting Salesforce Integrations — Cybersecurity Dive Klue is investigating a supply chain compromise affecting Salesforce integrations, potentially impacting hundreds of enterprise customers including prominent cybersecurity firms. Customer data exposure is suspected, highlighting risks in third-party integration ecosystems.

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps — SecurityWeek Critical multi-tenant isolation flaws in the Dify AI platform could allow attackers to access private chats, preview documents from other tenants, and reach internal APIs. This vulnerability exposes a massive attack surface across over 1 million dependent applications, demanding urgent mitigation and tenant segmentation reviews.
Five Eyes Warn of Looming AI-Fueled Cyber Threats — Cybersecurity Dive The Five Eyes intelligence alliance warns that advanced AI models will soon enable more sophisticated cyberattacks, surpassing current threat expectations within months. Organizations should accelerate AI-aware defensive measures and threat hunting to prepare for AI-driven TTP evolution.

Scattered Spider Members Plead Guilty to 2024 Transport for London Hack — BleepingComputer Two members of the Scattered Spider cybercrime group admitted guilt for the 2024 breach of Transport for London systems. This case underscores ongoing risks from financially motivated groups targeting critical infrastructure and public transit networks.

New Deadlines Set for Post-Quantum Cryptography Adoption in US Agencies and Contractors — Cybersecurity Dive The White House has issued updated mandates accelerating adoption of post-quantum cryptography standards across federal agencies and contractors. This executive order also funds research to protect quantum computing advancements from adversarial exploitation, signaling a strategic shift in cryptographic defense posture.