Security firms affected by Salesloft Drift breach.

Top cybersecurity headlines: stolen authentication tokens from AI chatbot provider Salesloft/Drift have exposed Salesforce integrations and led to breaches at major security vendors; an extortion group claiming ties to Lapsus-style actors disrupted Jaguar Land Rover operations (possible ransomware/extortion); reporting links China's Salt Typhoon campaign to broad espionage potentially impacting millions of Americans; a malicious PDF editor campaign deployed the TamperedChef infostealer across Europe; Amazon disrupted an APT29 watering‑hole campaign; and CISA named a new Executive Assistant Director of Cybersecurity.