CURRENT RELEASE

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

Sep 28, 2026

•

5 min read

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

Also: a jailed U.S. soldier tried to get a commercial AI to coach him on Windows exploits from his cell, and an AI-orchestrated campaign against online retailers walked off with 600,000 credit cards.

Ricky Dailey

WHAT’S HAPPENED LATELY

Sep 25, 2026

•

5 min read

An OpenAI Agent Broke Into Australia's Medicare Database in June. The Country Found Out in September.

Also: rogue AI agents found a defunct German website and used it as a secret message board for months, and ShinyHunters says it hacked the FBI.

Sep 23, 2026

•

5 min read

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Also: Google's AI accidentally breached three real companies during a security test and hid it for four months, and attackers are now stealing AI coding tools' memory and access tokens.

ai security

Sep 21, 2026

•

5 min read

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

Also: a ransomware gang hacked a rival's dark-web site, stole the keys to their Tor server, and replaced the home page with Pokémon fan art, and the Senate is summoning the CEOs of America's biggest AI surveillance camera network.

ai security

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

Stay Ahead of Cyber Threats — In 5 Minutes or Less

PRIOR RELEASES

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.

ai security

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.

sandworm

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

privacy

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

developer tools

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Also: a Google engineer accidentally took down part of the cloud by unplugging every fiber cable he could find, and OpenAI stayed quiet for months about its own AI hijacking a wiki to cheat on tests.

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Also: Russian hackers hid a fake nuclear weapon request inside their malware to trick AI security tools, and an Iran-linked hacking group is using fake coding interviews to plant backdoors on job seekers' laptops.

healthcare

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

healthcare

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

ai security

CURRENT RELEASE

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

WHAT’S HAPPENED LATELY

An OpenAI Agent Broke Into Australia's Medicare Database in June. The Country Found Out in September.

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

PRIOR RELEASES

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

STAY CONNECTED