2026
Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Researchers warn many AI coding assistants now execute commands from project configurations
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers
Security boss thought MFA would be too much security
One rule for the workers, another for execs
Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder
Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models
Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
Spotted in intrusions targeting insurance, education, IT, and professional services sectors
UK school’s network left wide open for invasion, student found
And the admin password was right in the Active Directory description field
Nation-state actors cracked critical Australian infrastructure to ‘cripple it at a time of their choosing’
To defuse another attack, Oz spies called foreign counterparts to tell them an op was a bust
The hits keep on coming for Cisco vulnerabilities
CVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought
Microsoft uses AI to link two malware operations in racketeering suit
200+ C2 servers linked to StealC and Amadey shut down
London cops bring live facial recognition to West End
'Permanent biometric surveillance of the public square' incompatible with policing by consent, say critics