Thalha Jubair and Owen Flowers led and directed many attacks attributed to the hacker subset of The Com. U.S. authorities previously accused Jubair of participating in at least 120 attacks. The...
Europe’s effort to loosen Beijing’s grip on the materials it needs to rearm has hit an unexpected snag: the deep pockets of the U.S. America is on a global shopping spree outside China to secure...
Russian recruits arriving on the front lines in Ukraine survive an estimated 20 to 30 minutes before they are killed or wounded, Central Intelligence Agency Director John Ratcliffe said Wednesday,...
Dear readers, The AI race is no longer simply about building more capable models. It is increasingly about understanding what those models will enable – for defenders and attackers alike – and...
The clock is ticking. Frontier artificial intelligence (AI) models with remarkable cyber capabilities have emerged, leaving little time to address weaknesses in U.S. cyber defenses. It is...
Command injection vulns land on exploited list after researchers spot abuse attempts
In June 2025, LevelBlue SpiderLabs published Tracing Blind Eagle to Proton66, in which we assessed with high confidence that Blind Eagle (also tracked as APT-C-36, APT-Q-98, TAG-144, AguilaCiega),...
The Federal Aviation Administration (FAA) and Transportation Security Administration (TSA) work together to ensure the cybersecurity of the interconnected systems operating in the National...
Between January and June 2026, Tehran survived unprecedented military, economic, and political pressure by relying on its longstanding hybrid warfare model: blending asymmetric military...
China’s military advancements justify the Space Force’s $71 billion budget request, the White House nominee to lead the service said during a short and uncontentious Senate confirmation hearing on...
Chinese startup Moonshot AI has unveiled a new model it says closes the gap with leading U.S. offerings and surpasses OpenAI and Anthropic’s most capable systems on some benchmarks. Kimi K3 still...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV)...
A specific multi-touch gesture bypasses an authentication prompt, allowing anyone to send messages
Really interesting piece of cryptographic history: In November 2023, a large cache of his wartime papers—nicknamed the “Bayley papers”—was auctioned in London for almost half a million U.S....
Introduction Seqrite Labs recently identified a malware distribution campaign that abused the credibility of government institutions to increase infection success rates. The threat actors...
A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access. The post Three Steps to the Terminal: A...
The City Attorney’s Office sent the tech giants cease-and-desist letters this week telling them to stop profiting from 13 “face-swap” apps that are overwhelmingly used to target women and girls.
Adapting existing local LLM project for security and sovereignty purposes and hopes to one day match Mythos
Data purges deemed an example of 'misaligned behavior' that upstart is working to avoid
Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response Report. The post AI, Automation and Attacks: Unpacking the Unit 42 2026...
Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July 2026, for the 2024 hack of Transport for London. The attack left...
Models demand trust without offering verification
A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goes bad, the box starts talking to...
n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a...
Grafana security advisory (AV26-710)
Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix lures since late April 2026. "The malware is...
Universities have long supported national security through research, education and workforce development. But Auburn University leaders say the scale and speed of today’s challenges require...
ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks...
Long foretold, the Great Patching has begun and it’s a doozy. Buckle in as Joe takes you through the story.
Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering