CURRENT RELEASE

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Sep 14, 2026

•

6 min read

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.

sandworm

Ricky Dailey

WHAT’S HAPPENED LATELY

Sep 11, 2026

•

5 min read

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

privacy

Sep 9, 2026

•

5 min read

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

developer tools

Sep 7, 2026

•

4 min read

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Also: a Google engineer accidentally took down part of the cloud by unplugging every fiber cable he could find, and OpenAI stayed quiet for months about its own AI hijacking a wiki to cheat on tests.

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

Stay Ahead of Cyber Threats — In 5 Minutes or Less

PRIOR RELEASES

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

healthcare

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

ai security

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.

threat-intelligence

Hackers Are Using AI to Write Exploit Code for the Machines That Run Your Water and Power

Also: the agency that protects federal networks leaked its own AWS passwords on GitHub for six months, and researchers tricked Copilot into confessing its own security holes.

ai security

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

Also: a ransomware gang's own anti-detection trick broke its own encryption tool, and one web page can trick Grok into leaking your name, location, and full chat history.

ai security

A Mystery Attacker Has Been Reading Salesforce and ServiceNow Data Worldwide for 17 Months

Also: a real-time deepfake mask glitched for less than a second and blew a fraudster's cover, and a $100 coin-sized gadget can hijack a Boeing 737's flight computers in under a minute.

ai security

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Also: DEF CON attendees allegedly jammed a Delta flight's WiFi to phish fellow passengers mid-air, and Clop's ransomware spree just hit Shell, GE, and Philips.

ai security

CURRENT RELEASE

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

WHAT’S HAPPENED LATELY

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

PRIOR RELEASES

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Hackers Are Using AI to Write Exploit Code for the Machines That Run Your Water and Power

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

A Mystery Attacker Has Been Reading Salesforce and ServiceNow Data Worldwide for 17 Months

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

STAY CONNECTED