CISA is bracing for potential staffing reductions. Russian hackers have targeted a Western military mission in Ukraine. China has admitted to conducting Volt Typhoon attacks, according to a report. The U.S. is set to sign an agreement to restrict spyware abuses. A lab supporting Planned Parenthood has confirmed a data breach affecting 1.6 million people. Threat actors are stealing metadata from unsecured Amazon EC2 instances through SSRF attacks. A critical vulnerability in a WordPress plugin is being actively exploited. Details have emerged on a critical unauthenticated remote code execution flaw in Ivanti products. Johannes Ullrich from SANS Technology Institute discusses "Vibe Security", cautioning against over-reliance on AI by security teams. The discussion also considers whether AI chatbots truly understand, and the importance of that question.