Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
The Trump administration is weighing the nomination of Palantir CTO Shyam Sankar to lead CISA, according to two sources, as the federal cybersecurity agency has operated without a Senate-confirmed director since January 2025.
Jay Goldberg · 152 DAYS AGO
Palo Alto Networks reported fiscal Q3 2026 revenue of $3 billion, up 31% year over year, as the rise of advanced AI models like Anthropic's Claude Mythos intensified enterprise cybersecurity demand rather than diminishing it.
Sara Montes de Oca · 154 DAYS AGO
Sophos researchers uncovered a ransomware toolkit built with AI tools including Claude Opus agents, capable of automating Active Directory discovery and evading EDR products from Sophos, CrowdStrike, and Microsoft after iterative AI-assisted testing.
Sara Montes de Oca · 154 DAYS AGO
GoDaddy security researchers have found malware on approximately 1,980 WordPress websites as part of a campaign that hides command-and-control data inside Steam Community profile comments using invisible Unicode characters.
Sara Montes de Oca · 155 DAYS AGO
Palo Alto Networks has raised the severity of CVE-2026-0257, a GlobalProtect VPN authentication bypass flaw, to High after Rapid7 observed active exploitation across multiple customers dating back to May 17. CISA has ordered federal agencies to apply mitigations by June 1, 2026.
Jay Goldberg · 156 DAYS AGO
A 19-year-old Linux kernel vulnerability called CIFSwitch allows unprivileged local attackers to forge CIFS authentication requests and gain root access, affecting Linux Mint, CentOS Stream 9, Rocky Linux 9, Kali Linux, and other major distributions.
Jay Goldberg · 157 DAYS AGO
Researchers at Push Security have uncovered a campaign dubbed "LLMShare" that abuses ChatGPT's content-sharing feature to display fake OpenAI outage pages hosted on chatgpt.com, redirecting users to download malware disguised as a desktop application.
Jay Goldberg · 158 DAYS AGO
Federal prosecutors charged Google engineer Michele Spagnuolo with money laundering, commodities fraud, and wire fraud, alleging he used internal search trend data to place Polymarket bets that earned him $1.2 million.
Sara Montes de Oca · 160 DAYS AGO
GCHQ Director Anne Keast-Butler will warn Wednesday that the West faces a "narrowing window" to counter escalating cyber and hybrid threats from China and Russia, calling for cybersecurity to become "ten times more urgent."
Jay Goldberg · 160 DAYS AGO
Two men have been arrested under the Take It Down Act after FBI agents identified them through basic web browsing, PayPal records, and, in one case, a profile photo the suspect apparently took himself.
Sara Montes de Oca · 161 DAYS AGO
CISA has ordered U.S. federal agencies to patch a critical SQL injection flaw in the Drupal CMS by midnight on May 27, after more than 15,000 exploit attempts were observed targeting nearly 6,000 sites across 65 countries.
Jay Goldberg · 161 DAYS AGO
A security firm found that deleted Google API keys remain exploitable for up to 23 minutes, allowing attackers to exfiltrate data from Gemini — a gap Aikido researcher Joseph Leon says is a matter of priorities, not engineering limits.
Jay Goldberg · 163 DAYS AGO
Security researchers say AI chatbot attacks have evolved from simple command injections into sophisticated psychological manipulation, with firms like Mindgard now profiling models the way interrogators profile suspects to probe their conversational vulnerabilities.
Sara Montes de Oca · 163 DAYS AGO
Researchers at AI red-teaming firm Mindgard say they "gaslit" Claude into producing prohibited content, underscoring a broader shift in which hackers are exploiting chatbot behavior through psychological manipulation rather than technical exploits.
Jay Goldberg · 163 DAYS AGO
Researchers at AI red-teaming firm Mindgard have demonstrated that chatbots can be manipulated through psychological pressure rather than traditional hacking techniques, signaling a new class of AI security threat that relies on conversation as its primary weapon.
Jay Goldberg · 163 DAYS AGO
Meta settled a landmark Kentucky school district lawsuit over alleged addictive platform design and faced a new Texas AG suit challenging WhatsApp's end-to-end encryption claims, capping a legally turbulent week for the company.
Sara Montes de Oca · 164 DAYS AGO
CISA has launched a public nomination form allowing security researchers, vendors, and industry partners to submit vulnerabilities for addition to the Known Exploited Vulnerabilities catalog, broadening a program central to federal and private-sector cybersecurity triage.
Sara Montes de Oca · 165 DAYS AGO
Google accidentally exposed details of an unpatched Chromium remote code execution flaw, Cisco patched a maximum-severity Secure Workload vulnerability, and researchers detailed a Chinese espionage campaign hitting telecom providers with new Linux and Windows malware.
Jay Goldberg · 166 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.