Daily News - freelancers and SMBs targeted

A phishing campaign targeting freelancers puts contractors and small businesses at immediate risk, while the Sality peer-to-peer botnet takedown shows the value of coordinated disruption. SonicWall SMA1000 zero-days require prompt firmware verification and patching. Aesto Health’s breach reinforces the exposure of patient data, and active exploitation of Langflow can compromise AWS and OpenAI keys, driving cloud costs and exposing proprietary models. Actions: audit remote-access systems, confirm SonicWall versions, rotate credentials used by Langflow and similar AI frameworks, and review whether staff are placing sensitive data into public AI tools. The episode also examines when local LLM inference is practical and why sound architecture still matters before relying on AI-generated code.