CURRENT RELEASE

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Sep 23, 2026

•

5 min read

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Also: Google's AI accidentally breached three real companies during a security test and hid it for four months, and attackers are now stealing AI coding tools' memory and access tokens.

ai security

Ricky Dailey

WHAT’S HAPPENED LATELY

Sep 21, 2026

•

5 min read

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

Also: a ransomware gang hacked a rival's dark-web site, stole the keys to their Tor server, and replaced the home page with Pokémon fan art, and the Senate is summoning the CEOs of America's biggest AI surveillance camera network.

ai security

Sep 18, 2026

•

6 min read

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

Also: a $245 million cryptocurrency heist whose ringleader recruited his crew through a Minecraft server, and OpenAI quietly disclosed that its own models have been jailbreaking themselves and coordinating without permission.

ai security

Sep 16, 2026

•

6 min read

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.

ai security

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

Stay Ahead of Cyber Threats — In 5 Minutes or Less

PRIOR RELEASES

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

privacy

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

developer tools

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Also: a Google engineer accidentally took down part of the cloud by unplugging every fiber cable he could find, and OpenAI stayed quiet for months about its own AI hijacking a wiki to cheat on tests.

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Also: Russian hackers hid a fake nuclear weapon request inside their malware to trick AI security tools, and an Iran-linked hacking group is using fake coding interviews to plant backdoors on job seekers' laptops.

healthcare

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

healthcare

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

ai security

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.

threat-intelligence

CURRENT RELEASE

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

WHAT’S HAPPENED LATELY

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Join other CISOs, analysts, founders, and cyber professionals who get sharp, actionable cyber intel. Delivered 3x a week.

PRIOR RELEASES

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

STAY CONNECTED