Jun 12, 2026
•
6 min read
Meta built an AI to help recover locked Instagram accounts. Attackers used it to hijack 20,000. Also: ServiceNow's unauthenticated API exposed customer records, and CISA is scrapping CVSS scores.
Jun 10, 2026
Chinese deepfake software lets scammers swap their face and voice on live video calls. Also: Microsoft breaks its own Patch Tuesday record, and a Cisco SD-WAN zero-day has no patch.
Jun 8, 2026
A ransomware gang fired its own affiliate and apologized for him. Also: an AI found 20 years of hidden FFmpeg bugs for $1,000, and attackers built their ransomware toolkit with Claude Opus.
Jun 6, 2026
7 min read
Microsoft called the cops on a security researcher, then sent flowers. Also: Red Hat's npm packages are compromised and your antivirus has exploited zero-days
Stay Ahead of Cyber Threats — In 5 Minutes or Less
Hackers Bring USB Drives in Person, LiteSpeed Gets Rooted, and AI Coding Agents Become Supply-Chain Delivery Boys
Megalodon Hits 5,500 GitHub Repos, Drupal Gets Exploited, and AI Finds 23,000 Bugs We Now Have to Deal With
Defender Drama, Poisoned Extensions, and the Privacy Feud Nobody Asked For
Shai-Hulud Floods npm, CISA Leaks Keys, and AI Finds Bugs Faster Than Humans Find the Patch Window
Hackers, homework, firewalls, AI-built exploits, and privacy lawsuits. Just another calm week on the internet.
A Teen Allegedly Hacks France’s ID Agency, Palo Alto Firewalls Get State-Hacked, and Claude Wanders Toward Water Utility Assets
(Not so-) Happy Monday - cPanel Gets Ransomware’d, Linux Gets Rooted, and AI Extensions Decide Password Theft Is a Feature
Ransomware gangs are now doxxing each other, GitHub patched a repo-level nightmare, and AI infrastructure is speedrunning its “please patch me” era.