Daily News, July 2nd - Sharepoint RCE

Today, we cover urgent threats and evolving security landscapes. A high-severity Microsoft SharePoint RCE, patched in May, is now actively exploited, demanding immediate verification of your patch status. New Android malware underscores the critical need for robust mobile device security and enhanced employee awareness regarding app downloads. We also discuss the complexities introduced by Cloudflare's new Monetization Gateway and the supply chain security implications of open-source IoT devices like the Oomwoo robot vacuum.On the AI front, we explore how benchmarks like Senior SWE-Bench raise questions about securing AI-generated code and preventing its malicious use. Crafty, AI-powered phishing campaigns are adapting to device and OS fingerprints, making social engineering attacks more effective. Google Cloud's agentic AI, transforming enterprise data into real-time action, offers efficiency but requires careful consideration of agent permissions and data access.Key takeaways include immediately patching the Microsoft SharePoint RCE, tightening mobile device security with refreshed user training, and evaluating the security and efficiency impact of AI agents.