Daily News, 21 July - Qilin ransomware

Today’s briefing highlights active exploitation of zero-day vulnerabilities. The Qilin ransomware gang is leveraging a critical Palo Alto PAN-OS GlobalProtect VPN flaw, while SonicWall SMA1000 appliances have also been compromised through zero-day exploits. These incidents underscore the urgent need for immediate patching and vigilance, as attackers are actively targeting widely used network infrastructure. We also examine a data breach at Estée Lauder, stemming from an Oracle E-Business Suite vulnerability, which serves as a stark reminder that even established systems can harbor legacy flaws leading to significant data exposure. For those working with AI, we discuss a concerning development where researchers escaped sandboxes in AI coding assistants like Cursor and Gemini CLI, demonstrating a new twist on prompt injection and the potential for AI to execute malicious code.Beyond the threats, this episode explores practical advancements in AI. We cover Google Cloud Tech’s resources on "Agentic Harnesses" and "4 steps to better AI agents," offering valuable guidance on context engineering for robust AI development. Additionally, we touch on Dan Martell’s guide to building your first AI agent and "Nativ," a tool enabling local execution of open AI models on Mac, enhancing privacy and cost control.Key takeaways for immediate action include patching Palo Alto GlobalProtect and SonicWall SMA1000 appliances, reviewing Oracle E-Business Suite patching cadences, and engaging with resources on AI agent building and security.