# Critical Cybersecurity Developments and CISA's Budget Crisis Global cyber threats rise as CISA faces resource depletion. - **Source:** [CyberWire Daily](https://brifing.si/source/08fbf94c-e51b-42cb-be13-84db10e5d993) - **Published:** 2026-08-25 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/62f25dee-7aa2-4538-9276-37aa84df2b18 ## CISA's Budget Crisis The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is facing operational challenges due to budget cuts. Lawmakers have called for an investigation into how staff reductions are affecting national security. Experts warn that weakened cyber defenses are putting critical infrastructure at risk. This comes at a time when cyber threats from China and Russia are intensifying. ## Critical Vulnerability in Zimbra Software Over 270 servers have been hacked due to a security flaw in Zimbra Collaboration Suite. Attackers can gain unauthorized access to email systems and steal sensitive data. Security professionals urge immediate patching. This incident highlights the prevalence of vulnerabilities in enterprise software. ## Open-Weight AI Model from China A Chinese AI lab announced preparations to release a powerful open-weight model. The technology could pose cybersecurity risks, with experts concerned about potential misuse by malicious actors. This development reflects the global competition in artificial intelligence. ## New Phishing Toolkit Threat A new phishing toolkit called iAuthFlow v2 has been discovered, capable of surviving password resets. The $10,000 tool makes account takeovers easier for attackers. Security analysts warn financial institutions and large corporations to take precautions. Its proliferation could mark a new era in phishing attacks. ## Major DDoS Attack on Norway Norwegian government services experienced hours of downtime due to a large-scale DDoS attack. While the source remains unconfirmed, suspicion falls on Russia-linked hacker groups. The incident demonstrates the vulnerability of government systems. Norwegian officials pledged to strengthen cybersecurity infrastructure. ## Critical Oracle Vulnerability CISA added a maximum-severity flaw in Oracle software to its Known Exploited Vulnerabilities catalog. The vulnerability could allow attackers full system access. Companies must implement patch management immediately. This situation reminds us of security risks in enterprise software supply chains. ## Illegal AI Server Exports Taiwanese prosecutors charged nine individuals, including Nvidia and Super Micro employees, for illegally exporting high-performance AI servers to China. The case highlights intensifying technology transfer battles in AI. Authorities warned of continued enforcement actions. ## Global Cooperation in Cybersecurity Operation Jackal IV targeted cybercrime networks in West Africa, resulting in dozens of arrests and seizure of millions in assets. This operation underscores the importance of international collaboration against cybercrime. Experts call for more coordinated actions of this nature. ## Sources covering this story - https://www.thecyberwire.com/podcasts/daily-podcast/2622/notes — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._