Federal agencies have issued warnings about a current campaign targeting critical infrastructure. Citrix is working to fix severe vulnerabilities in its NetScaler products. Over fifty thousand Stripe API keys have been exposed, potentially leading to increased fraud. Attendees of Black Hat and DEF CON are experiencing a novel social engineering attack. Atlassian, Splunk, and Cisco have collectively addressed hundreds of security weaknesses. A new Android banking trojan exhibits an unusual data exfiltration method. A significant healthcare data breach has affected 3.8 million individuals. The SilkParasite campaign is expanding its cyberespionage operations throughout Central Asia. CISA is considering substantial changes to how it procures federal cybersecurity software. Chris Wallis of Intruder discusses how AI agents are making traditional annual penetration tests obsolete and changing exposure management strategies.