LastPass has confirmed that customer information was affected by the Klue breach, though they assert passwords remain secure. Attackers are actively exploiting a vulnerability in Cisco Unified Communications Manager. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged actively exploited flaws in Ubiquiti and Lantronix devices, urging immediate patching. New flaws in DifyTap could allow unauthorized access to private AI conversations across different users. Researchers discovered that an AI plugin registry permitted unofficial tools to impersonate legitimate software. The launch of the xpl0itrs leak site suggests a move towards comprehensive cyber extortion services. Indian automotive giant Bajaj Auto has fallen victim to a ransomware attack. The U.S. government is urging Meta to allow its AI models to undergo national security reviews. An individual accused of administering a criminal marketplace has been extradited to the United States. Furthermore, the U.S. has expanded sanctions against a Cambodian network involved in cyber fraud operations.