AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a...
Ruby are you ok? Ruby are you ok? Are you ok Ruby?
Cisco security advisory (AV26-921)
This is a current list of where and when I am scheduled to speak: I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026 at 5 PM ET. I’m speaking at...
Officials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them money. The post Five alleged leaders of Black Axe’s operations in...
Android security advisory – September 2026 monthly rollup (AV26-920)
There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a...
In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively targeted around 1,200 victims.
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this: We identified a cell of threat actors...
CERT Polska has received a report about 2 SQL Injection vulnerabilities (CVE-2026-7848 and CVE-2026-15600) found in Alior Bank "raty" module for PrestaShop.
Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking. MikroTik routers are network devices that use the RouterOS operating...
Samsung mobile security advisory (AV26-919)
Russia’s full-scale invasion of Ukraine in February 2022 triggered sweeping international isolation for Russia and stretched the nation’s resources. Nonetheless, Moscow has intensified its...
A top Iranian official has been blocked from addressing the International Atomic Energy Agency’s general conference in Vienna after pressure from the U.S. Mohammad Eslami, the head of the Atomic...
MongoDB security advisory (AV26-918)
Prisoners need little more than contraband cellphones and well-honed scripts passed inmate to inmate, investigators say. They at times dial randomly, threatening arrest if fines aren’t paid for...
Artificial intelligence (AI) is enabling threat actors to send unholy volumes of fraudulent emails, personalized to a degree that mass emailers of old couldn’t have touched. Last month, Microsoft...
Telus, one of Canada’s largest telecom providers, is notifying some customers that their accounts have been breached and their personal information has been accessed. In data breach notifications...
The National Security Agency is set to undergo its most extensive internal restructuring in at least a decade, according to current and former officials briefed on the emerging plan. The new...
The modern battlefield is becoming more lethal and fast-moving, while the proliferation of sensors makes concealment increasingly difficult. Persistent sensing, precision-strike weapons,...
State governments are taking on a growing role in protecting critical infrastructure from cyber threats as risks increase across water and wastewater systems, healthcare, transportation, energy...
China criticized dire warnings about AI’s risks after leading U.S. technology executives backed calls to slow the development of advanced models and warned that a Chinese advantage could threaten...
It took just a few hours over the weekend for well-known Silicon Valley figures to push back on calls by leading artificial intelligence companies to slow down the development of AI and to more...
Guess what? Bellingcat is finally launching an official merch line! That’s right: after years of fantasizing and wishing, we’re finally ready to get our name and logo on cool merch that you’ll be...
Attackers exploit Volume Shadow Copy for credential theft and ransomware defense evasion. See how Huntress spots the difference from routine IT activity.
When threat actors target people’s devices, they usually infect it with one of many malware strains: an infostealer, a remote access trojan, a backdoor, or a ransomware encryptor. Rarely do we see...
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named...
The Government Accountability Office (GAO) found that the Federal Emergency Management Agency (FEMA) —a component within the Department of Homeland Security (DHS)— partially followed leading...
As Air Force One returned to Washington, D.C. on the night of Sept. 11, 2001, Michael Morell looked out a window and saw an F-16 off the aircraft’s wingtip. Beyond it, the Pentagon was still...