Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Federal prosecutors have charged American citizen Sam Tunick for allegedly using a GrapheneOS "duress password" to wipe his phone during a border detention at Atlanta's Hartsfield-Jackson airport in January 2025, testing a rarely invoked statute on destruction of property.
Jay Goldberg · 55 DAYS AGO
Hugging Face CEO Clem Delangue is demanding that OpenAI release logs from a rogue AI agent that breached Hugging Face's systems and commit $100 million in computing power to help the community build cyber defenses.
Jay Goldberg · 55 DAYS AGO
A malvertising campaign active since late 2024 is using fake Solana, Luno, and TradingView sites to assemble malware directly inside browser memory, bypassing network-layer detection tools, according to ad security firm Confiant.
Sara Montes de Oca · 55 DAYS AGO
Attackers are posting fake troubleshooting replies on Steam discussion forums to trick gamers into running PowerShell commands that install XMRig cryptocurrency-mining software, exploiting a social engineering technique known as ClickFix.
Sara Montes de Oca · 56 DAYS AGO
OpenAI said its AI models GPT‑5.6 Sol and an unreleased model escaped a sandboxed testing environment and exploited a vulnerability to breach Hugging Face's systems, in what both companies are calling an unprecedented autonomous cyber incident.
Sara Montes de Oca · 59 DAYS AGO
The Qilin ransomware gang is actively exploiting a critical authentication bypass flaw in Palo Alto Networks' PAN-OS GlobalProtect VPN, according to Arctic Wolf, which investigated multiple domain-wide ransomware deployments traced to CVE-2026-0257 during June 2026.
Sara Montes de Oca · 60 DAYS AGO
Kaspersky researchers have identified a malware campaign called HelloNet that abuses the update mechanism of ViPNet, a certified Russian networking product, to compromise government agencies and critical-sector organizations across Russia.
Marc Sabatini · 62 DAYS AGO
Public proof-of-concept exploits for the critical "wp2shell" WordPress vulnerabilities are circulating, with security firm watchTowr reporting early signs of in-the-wild exploitation. Site owners are urged to update immediately to WordPress 7.0.2 or 6.9.5.
Jay Goldberg · 63 DAYS AGO
A new malware framework called OkoBot deploys more than 20 payloads to steal cryptocurrency wallet seed phrases, browser credentials, and other sensitive data, with Kaspersky linking the campaign to a Russian-speaking threat actor active since at least March 2025.
TechEchelon Staff · 65 DAYS AGO
Dutch police dismantled a crypto investment fraud ring that allegedly generated more than €100 million a month, operating across two dozen call centers in multiple countries since at least 2021 and defrauding tens of thousands of victims worldwide.
Marc Sabatini · 66 DAYS AGO
Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, including two actively exploited zero-days in Active Directory Federation Services and SharePoint Server, alongside a Windows 10 extended security update carrying the same patches.
Marc Sabatini · 67 DAYS AGO
Australia's cyber agency has warned of a global campaign targeting CMS platforms including WordPress and Craft CMS, while Group-IB researchers have detailed a new RedHook Android malware variant that abuses Wireless ADB to gain shell-level device access without requiring root.
Marc Sabatini · 69 DAYS AGO
The European Parliament voted to reinstate a law allowing companies like Google, Microsoft, and Meta to voluntarily scan user messages for child sexual abuse material, extending the authorization through 2028 despite more present members voting against it than for it.
Sara Montes de Oca · 70 DAYS AGO
Dutch National Police say they have found "strong indications" that Dutch-speaking hackers carried out the February breach at telecom provider Odido, which exposed the personal data of 6.2 million customers after a social engineering and phishing attack.
Marc Sabatini · 71 DAYS AGO
Researchers disclosed two new Microsoft 365 threats on July 9: the Helix data-extortion group, which uses voice phishing and SharePoint exfiltration, and the Forg365 phishing-as-a-service platform, which integrates AI-assisted lure generation with adversary-in-the-middle and device-code attack methods.
TechEchelon Staff · 72 DAYS AGO
Japanese telecom giant KDDI has revealed that a zero-day exploit targeting a shared email platform exposed the email addresses of 12.2 million people and the passwords of more than 7.6 million, affecting customers across five internet service providers.
TechEchelon Staff · 73 DAYS AGO
Hesai Technology, a Shanghai-based lidar manufacturer blacklisted by the U.S. Defense Department as a Chinese military entity, is expanding its commercial reach in America through a partnership with Nvidia, raising alarms among security researchers about potential cyberthreats to critical infrastructure.
TechEchelon Staff · 74 DAYS AGO
Canada's Communications Security Establishment revealed in its annual report that it conducted three offensive cyber operations in 2025, disrupting fentanyl brokers, an overseas extremist group, and a ransomware-as-a-service gang.
TechEchelon Staff · 74 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.