Daily News, July 14th, GovCloud key leak

Today, we dissect a significant CISA data leak involving AWS GovCloud keys exposed in a public GitHub repository for six months, emphasizing the urgent need for robust code hygiene and credential management practices. We also cover U.S. Treasury sanctions against ransomware enablers, disrupting their financial networks.On the software supply chain front, learn about the Jscrambler npm package backdoor injecting infostealer malware, and the "CrashStealer" macOS malware masquerading as a system tool to steal credentials and crypto wallets. Web administrators will find crucial warnings about actively exploited remote code execution flaws in Joomla extensions like iCagenda and Balbooa Forms, requiring immediate patching.We also explore practical AI and security automation, including Google Cloud Tech's agentic skills for DevOps and Microsoft Defender's new Prompt Injection Protection for Email, addressing novel AI attack surfaces.Key takeaways include reviewing public code repositories for exposed credentials, rigorously vetting third-party packages and extensions, and exercising extreme skepticism toward unsolicited software. Proactive security is paramount in today's evolving threat landscape.