Latest

19
Jul
When "unauthorized AI app" becomes an SEC disclosure category of its own- 247

When "unauthorized AI app" becomes an SEC disclosure category of its own- 247

May 12, 2026 A community bank operating across Pennsylvania, Ohio, and West Virginia has filed an SEC disclosure over an
3 min read
19
Jul
The worm that infects the tools developers trust to catch it- 246

The worm that infects the tools developers trust to catch it- 246

April 30, 2026 TeamPCP's Mini Shai-Hulud campaign has spent the past 48 hours poisoning official npm and
2 min read
19
Jul
A malware sample built for single-core Windows XP may be the first cyberweapon ever found- 245

A malware sample built for single-core Windows XP may be the first cyberweapon ever found- 245

April 24, 2026 Five years before Stuxnet became the textbook case for cyber-physical sabotage, something called FAST16 may already
3 min read
19
Jul
ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

April 29, 2026 Thirty seemingly ordinary AI agent skills, published by a single anonymous author and downloaded nearly 10,000
3 min read
19
Jul
Ten months later, nobody knows why Huawei routers took down Luxembourg's phone network- 243

Ten months later, nobody knows why Huawei routers took down Luxembourg's phone network- 243

July 7, 2026 For more than three hours on July 23, 2025, landline, 4G, and 5G service across Luxembourg went
3 min read
19
Jul
THORChain's breach is a rounding error in 2026's record year for crypto theft- 242

THORChain's breach is a rounding error in 2026's record year for crypto theft- 242

June 28, 2026 THORChain, a decentralized cryptocurrency exchange founded in Switzerland in 2018, lost roughly $10.7 million on a
2 min read
19
Jul
Operation Ramz shows where Southeast Asia's scam compounds go when they get shut down- 241

Operation Ramz shows where Southeast Asia's scam compounds go when they get shut down- 241

June 28, 2026 INTERPOL's Operation Ramz, the largest coordinated cybercrime operation the organization has ever run in the
3 min read
19
Jul
Turla's botnet redesign is about surviving disruption, not just evading detection- 240

Turla's botnet redesign is about surviving disruption, not just evading detection- 240

June 28, 2026 Russia's FSB-linked Turla group has rebuilt its longstanding Kazuar backdoor into something structurally different
3 min read
19
Jul
Three times through the same door: FamousSparrow's patient campaign against Azerbaijan's energy sector- 239

Three times through the same door: FamousSparrow's patient campaign against Azerbaijan's energy sector- 239

December 25, 2025 A China-linked espionage group returned to the exact same compromised Microsoft Exchange server three separate times
3 min read
19
Jul
Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

May 11, 2026 A technique security researchers first observed in isolated red-team and espionage use back in 2020 has,
3 min read