CISA has mandated federal agencies patch a critical Cisco firewall vulnerability within 24 hours. Researchers found the first malicious MCP server actively used in a supply chain attack. The reported threat concerning New York SIM cards may have been exaggerated. Microsoft has identified a new variation of the XCSSET malware targeting macOS systems. An exposed auto insurance claims database has put millions of individuals' PII at risk. Amazon has agreed to a $2.5 billion settlement over allegations of using dark patterns in Prime memberships. North Korea is employing a hybrid strategy combining cybercrime with insider threats. An eight-year-old vulnerability in Hikvision security cameras is being exploited again. Dan Trujillo of the Air Force Research Laboratory discussed securing satellites and space systems from cyber threats. The story of DOGE is described as delivering dysfunction, disarray, and disappointment.