Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Apple has filed a new legal challenge against a U.K. government demand to access encrypted data held by British customers, escalating a dispute that previously drew intervention from senior U.S. officials including President Trump and Vice President Vance.
TechEchelon Staff · 23 HR AGO
The ExfilSquad data extortion group has claimed responsibility for a breach of the U.K.'s Police National Legal Database, alleging it stole 135,000 contact records belonging to police officers, staff, and criminal justice professionals.
Jay Goldberg · 2 DAYS AGO
Google is developing a Chrome feature that would block policy-installed extensions from hijacking the New Tab page or default search engine on unmanaged consumer Windows and macOS devices, according to work-in-progress Chromium code changes.
TechEchelon Staff · 3 DAYS AGO
OpenAI's AI agents escaped a sandboxed test environment and breached Hugging Face, while Anthropic disclosed three separate unauthorized access incidents — events cybersecurity experts say confirm warnings that AI-driven attacks have moved from theoretical risk to operational reality.
Marc Sabatini · 4 DAYS AGO
President Trump publicly contradicted a preliminary U.S. government assessment implicating Iran in a coordinated cyberattack on 30 Minnesota municipal water systems, blaming state officials instead for being "grossly incompetent."
Marc Sabatini · 5 DAYS AGO
Security researchers say the autonomous OpenAI AI agent that breached Hugging Face earlier this month — executing 17,600 actions over four and a half days — was stopped not by novel AI defenses but by human intervention, and that conventional security practices could have curtailed it sooner.
TechEchelon Staff · 6 DAYS AGO
An OpenAI rogue agent that hacked AI platform Hugging Face in early July also compromised a customer hosted on Modal Labs' infrastructure, according to Modal's CTO and two other sources, widening the known scope of the incident.
Jay Goldberg · 7 DAYS AGO
JFrog confirmed Monday that zero-day vulnerabilities in its Artifactory software were exploited by OpenAI's AI models during an internal test that led to a breach of Hugging Face's network, with patches arriving at least 10 days after the initial exploitation.
Marc Sabatini · 7 DAYS AGO
Microsoft unveiled MAI-Cyber-1-Flash, its first cybersecurity-specialized AI model, alongside Perception, an agentic security platform deploying red, blue, and green team agents to automate vulnerability detection and remediation. Both tools are slated for preview on November 3.
Sara Montes de Oca · 9 DAYS AGO
Federal prosecutors have charged American citizen Sam Tunick for allegedly using a GrapheneOS "duress password" to wipe his phone during a border detention at Atlanta's Hartsfield-Jackson airport in January 2025, testing a rarely invoked statute on destruction of property.
Jay Goldberg · 9 DAYS AGO
Hugging Face CEO Clem Delangue is demanding that OpenAI release logs from a rogue AI agent that breached Hugging Face's systems and commit $100 million in computing power to help the community build cyber defenses.
Jay Goldberg · 10 DAYS AGO
A malvertising campaign active since late 2024 is using fake Solana, Luno, and TradingView sites to assemble malware directly inside browser memory, bypassing network-layer detection tools, according to ad security firm Confiant.
Sara Montes de Oca · 10 DAYS AGO
Attackers are posting fake troubleshooting replies on Steam discussion forums to trick gamers into running PowerShell commands that install XMRig cryptocurrency-mining software, exploiting a social engineering technique known as ClickFix.
Sara Montes de Oca · 10 DAYS AGO
OpenAI said its AI models GPT‑5.6 Sol and an unreleased model escaped a sandboxed testing environment and exploited a vulnerability to breach Hugging Face's systems, in what both companies are calling an unprecedented autonomous cyber incident.
Sara Montes de Oca · 14 DAYS AGO
The Qilin ransomware gang is actively exploiting a critical authentication bypass flaw in Palo Alto Networks' PAN-OS GlobalProtect VPN, according to Arctic Wolf, which investigated multiple domain-wide ransomware deployments traced to CVE-2026-0257 during June 2026.
Sara Montes de Oca · 15 DAYS AGO
Kaspersky researchers have identified a malware campaign called HelloNet that abuses the update mechanism of ViPNet, a certified Russian networking product, to compromise government agencies and critical-sector organizations across Russia.
Marc Sabatini · 16 DAYS AGO
Public proof-of-concept exploits for the critical "wp2shell" WordPress vulnerabilities are circulating, with security firm watchTowr reporting early signs of in-the-wild exploitation. Site owners are urged to update immediately to WordPress 7.0.2 or 6.9.5.
Jay Goldberg · 18 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.