Sep 16, 2026
•
6 min read
Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.
ai security
+6
Sep 14, 2026
Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.
sandworm
+7
Sep 11, 2026
5 min read
Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.
privacy
+4
Sep 9, 2026
Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.
developer tools
Stay Ahead of Cyber Threats — In 5 Minutes or Less
Also: Russian hackers hid a fake nuclear weapon request inside their malware to trick AI security tools, and an Iran-linked hacking group is using fake coding interviews to plant backdoors on job seekers' laptops.
healthcare
Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.
Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.
+5
Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.
Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.
threat-intelligence
Also: the agency that protects federal networks leaked its own AWS passwords on GitHub for six months, and researchers tricked Copilot into confessing its own security holes.
Also: a ransomware gang's own anti-detection trick broke its own encryption tool, and one web page can trick Grok into leaking your name, location, and full chat history.
Also: a real-time deepfake mask glitched for less than a second and blew a fraudster's cover, and a $100 coin-sized gadget can hijack a Boeing 737's flight computers in under a minute.
