Archive | Exzec Cyber Newsletter

Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record

Also: Egyptian hacktivists hijacked Argentina's football federation over a World Cup grudge, and a Welsh doxxing site admin got two years for turning swatting into a hobby.

ai security

A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.

Also: a red teamer stole a $250,000 trophy by pretending to fix the office Wi-Fi, and AI coding assistants are hallucinating the exact malware names attackers want them to install.

ai security

Accenture Got Hacked Again. This Is Its Third Time in Five Years.

Also: two convicted fraudsters built a bug-buying startup dangling $7 million payouts, and an AI agent ran a full ransomware attack start to finish, on its own.

ai security

ShinyHunters Hit Medtronic. 3.8 Million People Just Found Out.

Also: a ransomware gang apologized to its own victim, and Iran's hackers may have gotten an AI assist building their malware.

The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.

Also: a user swore a hacker named "General Failure" had invaded his PC, and an AI-built malware kit just learned to dodge nine different antivirus vendors.

ai security

The Department of Homeland Security Just Got Hacked. Again.

Also: hackers shoveled snow for network admin access, and the Supreme Court just said your location data needs a warrant.

ai security

Scattered Spider Left the Casino. Your Insurance Company Is Next.

Also: BEC is a subscription business growing 1,380% per year, Cambodia's scam cloud got seized, and MSG's celebrity risk files changed hands

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.

kddi

+11

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.

hacktivist

Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record

A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.

Accenture Got Hacked Again. This Is Its Third Time in Five Years.

ShinyHunters Hit Medtronic. 3.8 Million People Just Found Out.

The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.

The Department of Homeland Security Just Got Hacked. Again.

Scattered Spider Left the Casino. Your Insurance Company Is Next.

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

STAY CONNECTED