Blog
AI slop pollutes the CVE pipeline with fake vulns
With NIST still buried under its backlog, expect AI-generated bogus reports to continue
Russian spies turn public Wi-Fi into malware delivery systems
Keyloggers, audio-visual surveillance, and token theft on CaptivePortal's agenda as hospitality sector put on alert
Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict
Trump rejects Tehran theory, blames 'grossly incompetent' governor of Minnesota instead
UK government investment arm cops to 40-hour leak of officials’ contact details
Employee failed to follow security policy, leaving internal management file open to the public
AI is ‘both the weapon and the target’ in latest wave of cyberattacks
CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours
The most famous brand in physical security got pwned by ShinyHunters
Hopefully the company secures houses better than it locks down SaaS systems
Anthropic and OpenAI are competing to see whose agents can go rogue harder
Whoever wins, we lose
Charities remain locked out of CAF Bank online accounts
A week into shutdown, 14,000 customers still have no restoration date and some are struggling to pay staff
Anthropic’s Claude escaped test sandbox to attack three organizations
Wrote and published malware during tests, which is apparently OK because leaky test environments were the real problem
Jailed Flock vandal wipes out three cameras, racks up thousands in damages
A lesson for aspiring vandals: Take out all the cameras, not just the ones that flout your ideals