Scylla &Charybdis, Kyber, Trigonia, Namastex, GitHub, Crypto, Cables, Aaran Leyland - SWN #575

The Security Weekly News episode 575 dives into a high-stakes cybersecurity landscape where emerging threats are outpacing defensive capabilities. Doug White highlights a troubling trend: AI adoption in enterprises is accelerating faster than security teams can keep up, leading to a dangerous gap where high-risk AI applications are being deployed without proper remediation—only 15% of practitioners believe their organizations meet remediation SLAs, despite 57% of C-suite executives claiming they do. The episode then shifts to alarming ransomware developments, including Kyber ransomware using post-quantum Kyber 1024 encryption and Trigonia deploying custom, evasive data exfiltration tools that rotate connections every two gigabytes to avoid detection. A major supply chain compromise via the 'Canister Worm' attack exploited NPM package updates to distribute malware through the legitimate publisher of Mastic's Labs, corrupting AI tools like Namastix.ai—demonstrating how trusted open-source libraries can become vectors for widespread infection. Meanwhile, GitHub quietly began collecting pseudo-anonymous telemetry from CLI users without clear opt-out, raising privacy concerns. The episode also warns of fake crypto wallet apps impersonating legitimate ones on the App Store, designed to steal recovery phrases and drain wallets.