This month's edition looks at three developments shaping the current threat landscape: the changing economics of ransomware negotiation, a data exposure incident involving AI chatbot sharing links, and a critical WordPress vulnerability under active exploitation.
We examine why ransomware payment is becoming a less reliable route to resolution, as rising attacks, declining payment rates and repeat extortion show that even paying victims often gain little lasting protection.
We explore how conversations shared via Claude's "Anyone with a link" feature were indexed by search engines and exposed sensitive personal and corporate information, highlighting the governance risks of generative AI use.
We cover WP2Shell, a critical unauthenticated remote code execution exploit chain in WordPress Core that moved rapidly from disclosure to active exploitation, underlining the risks posed by widely deployed, internet-facing software.