As Day 99 rolls in, the tension between convenience and control is louder than ever. From AI vulnerability studies to legacy server breaches, the cracks are forming — and they’re no longer just human.
🤖 The Explosive Growth of Non-Human Identities (NHIs)
New research highlights a massive rise in non-human digital identities — think bots, APIs, service accounts — and with it, massive attack surface expansion. NHIs often lack MFA, have static keys, and are rarely monitored. They’re the perfect blind spot.
🔗 https://thehackernews.com/2025/04/explosive-growth-of-non-human.html
🧸 “Lovable” AI Found Most Vulnerable to Social Engineering
A fascinating study shows that AI personas designed to be friendly or emotionally engaging are far more susceptible to manipulation. The takeaway? Empathy-based design introduces new threat vectors. Even AI can be too trusting.
🔗 https://thehackernews.com/2025/04/lovable-ai-found-most-vulnerable-to.html
🌍 Tariffs Driving Up Global Cyberattacks
Geopolitical tensions are bleeding into cyberspace. Analysts warn that new tariffs are sparking retaliatory cyber campaigns — not just by nation-states, but by hacktivists and opportunistic actors. Trade war meets code war.
🔗 https://www.darkreading.com/cyber-risk/tariffs-increase-global-cyberattacks
🔗 (duplicate confirmed)
📩 OCC Hit with Major Cyber Incident, Email Data Exposed
The Office of the Comptroller of the Currency is investigating a major cyber incident involving executive and employee emails. Regulatory bodies being targeted signals how bold and capable attackers are becoming — especially when trust is the ultimate currency.
🔗 https://www.darkreading.com/vulnerabilities-threats/occ-major-cyber-incident-executive-employee-emails
💣 CrushFTP Exploitation Sparks Disclosure Debate
The ongoing CrushFTP exploitation saga reveals cracks in vulnerability disclosure culture. With researchers and vendors clashing over timelines, we’re reminded that coordination and communication are as critical as code fixes.
🔗 https://www.darkreading.com/vulnerabilities-threats/crushftp-exploitation-disclosure-dispute
🧨 Oracle Breach Linked to Two Obsolete Servers
Oracle confirmed that a breach originated from two obsolete servers still connected to critical infrastructure. It’s a classic case of “forgotten but functional” — and it cost them. Sunsetting tech isn’t just technical debt; it’s active liability.
🔗 https://www.darkreading.com/cyberattacks-data-breaches/oracle-breach-2-obsolete-servers
📎 Zero-Day Report: WLB-2025040015
A new zero-day affecting a widely-used internal data processing library has been added to the CXSecurity database. It’s still under analysis, but early chatter suggests privilege escalation potential. Worth keeping an eye on.
🔗 https://cxsecurity.com/issue/WLB-2025040015
💭 Reflection
It’s Day 99, and I keep circling back to the theme of non-human complexity. Whether it’s forgotten servers, friendly AIs, or unmonitored service accounts — the edges of security are fraying in places that aren’t always human-shaped. As I sharpen my CISSP focus, especially around identity, operations, and architecture, I’m reminded that true security isn’t about locking the doors — it’s about knowing where all the doors even are.
