DailyNews - June 10th

We dive into a record-breaking Patch Tuesday from Microsoft, featuring nearly 200 patched vulnerabilities, with almost three dozen deemed critical and exploit code already public for several. This highlights the urgent need for timely patching.The episode also covers a newly discovered Microsoft Defender zero-day exploit, "RoguePlanet," which grants SYSTEM privileges and emerged shortly after the Patch Tuesday fixes. This underscores the continuous threat landscape, where new vulnerabilities can appear even after extensive patching efforts. Further, we discuss security incidents at major platforms, including ServiceNow's disclosure of an exploited unauthenticated API endpoint and SAP's release of fixes for 15 vulnerabilities, four of which are critical in NetWeaver and Commerce Cloud. These incidents emphasize the widespread impact of platform vulnerabilities and the necessity for users to review advisories and apply mitigations promptly.Beyond direct cyber threats, we touch on the evolving attack surface introduced by advanced manufacturing, such as Mercedes-Benz's electric axial flux motor production, prompting consideration of new supply chain risks. The briefing also explores the potential and security implications of AI agents for "100X engineering" and secure deployment, while also highlighting critical data privacy considerations, like AWS Bedrock's upcoming requirement to share data with Anthropic. Key takeaways include prioritizing critical updates, immediately addressing ServiceNow and SAP advisories, and carefully evaluating data sharing policies when leveraging AI agents.