Daily News - May 29th

This Daily Intel briefing unpacks critical cybersecurity developments relevant to small-business leaders, cyber professionals, MSPs, CISOs, GovCon leaders, and security operators. We dive into the recent Charter Communications data breach, where the ShinyHunters gang compromised nearly 4.9 million accounts, underscoring the persistent threat of data exfiltration. We also highlight the active exploitation of a FortiClient EMS authentication bypass flaw (CVE-2026-35616) to deploy the EKZ credential stealer, emphasizing the urgent need for patching.The episode explores the evolving role of AI in cyberattacks, with the GreyVibe threat cluster leveraging ChatGPT and Gemini for sophisticated lures and custom malware targeting Ukrainian entities. We also discuss the BTMOB Android RAT, which provides cybercriminals with a builder interface for tailored payloads. On the defensive side, we examine advancements in AI and automation, including real-time LLM inference, Cloudflare's public beta Email Service, and Google Cloud Tech's AlloyDB integration for AI agents. Practical takeaways include reviewing exposure to major breaches, enhancing phishing awareness due to AI-generated lures, and evaluating new AI tools for internal automation and client delivery.