Ricky Dailey

ai security

Eight Keys That Can Vouch for Any Website Leaked. Browsers Cut Them Off in Hours.

Oct 21, 2026

•

4 min read

Eight Keys That Can Vouch for Any Website Leaked. Browsers Cut Them Off in Hours.

Also: WhatsApp's help pages secretly told its AI bot not to mention privacy regulators, and ransomware crews are skipping MFA on PAN-OS VPNs.

Ricky Dailey

ai security

173 Microsoft 365 Tenants Let an Attacker Walk In Through Their Backup App

Oct 19, 2026

•

4 min read

173 Microsoft 365 Tenants Let an Attacker Walk In Through Their Backup App

Also: an alleged pizza-data thief got caught via his own IP address, and an ad firm allegedly slipped spyware into online ads.

Ricky Dailey

ai security

Attackers Spent 10 Days Rooting Fully Patched Ivanti VPNs Before the Warning Came

Oct 16, 2026

•

4 min read

Attackers Spent 10 Days Rooting Fully Patched Ivanti VPNs Before the Warning Came

Also: an OpenAI engineer allegedly bugged the boardroom with a recorder wrapped in toilet paper, and hackers defrosted French supermarkets.

Ricky Dailey

ai security

A Ledger Reseller's Wallets Had a Hidden Implant. Suspected Losses Top $93M.

Oct 14, 2026

•

4 min read

A Ledger Reseller's Wallets Had a Hidden Implant. Suspected Losses Top $93M.

Also: a domain developers pasted into docs for years now serves malware, and an access broker ran 51 Claude Code agents at once.

Ricky Dailey

ai security

China's Hacking Contractor Built a Portal for Browsing Other People's Stolen Email

Oct 12, 2026

•

4 min read

China's Hacking Contractor Built a Portal for Browsing Other People's Stolen Email

Also: a Russian extortion gang plotted to sneak fake pizza guys into US law firms, and Anthropic's AI sent police a false murder tip.

Ricky Dailey

healthcare

It Took 190 Million Stolen Records to Get Hospital Cybersecurity Rules Through the Senate

Oct 9, 2026

•

4 min read

It Took 190 Million Stolen Records to Get Hospital Cybersecurity Rules Through the Senate

Also: the alleged ShinyHunters boss hit a former Boeing unit while his dad worked for Royal Jordanian, and AI agents hacked seven Korean banks.

Ricky Dailey

8.8 Million Danish ID Records Walked Out Through One Small Company's Login

Oct 7, 2026

•

4 min read

8.8 Million Danish ID Records Walked Out Through One Small Company's Login

Also: an engineer locked 3,000+ of his employer's computers after searching how to do it, and OpenAI's agents went poking at Wikipedia.

Ricky Dailey

Ransomware Hit a Water Utility Through SharePoint. Three Others Fell the Same Way.

Oct 5, 2026

•

4 min read

Ransomware Hit a Water Utility Through SharePoint. Three Others Fell the Same Way.

Also: AI agents fired SQL injection at government sites unprompted, and a security pro got re-arrested for moonlighting with ShinyHunters.

Ricky Dailey

cloud security

An AI Ransomware Gang Wiped Entire Azure Environments in Seven Minutes.

Oct 2, 2026

•

5 min read

An AI Ransomware Gang Wiped Entire Azure Environments in Seven Minutes.

Also: the global ransomware gang that hit 500 organizations was allegedly run by a teenager, and a UK government test found the newest GPT attacked open-source projects in nearly a third of simulations without being asked.

Ricky Dailey

Apple Patched a CoreGraphics Zero-Day. The Attack Was Sophisticated Enough That Meta Spotted It First.

Sep 30, 2026

•

5 min read

Apple Patched a CoreGraphics Zero-Day. The Attack Was Sophisticated Enough That Meta Spotted It First.

Also: an AI agent breached the nonprofit that hunts zero-days and kept getting in its own way, and the DOJ arrested the CEO of a phone-hacking firm that was secretly working for the FSB.

Ricky Dailey

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

Sep 28, 2026

•

5 min read

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

Also: a jailed U.S. soldier tried to get a commercial AI to coach him on Windows exploits from his cell, and an AI-orchestrated campaign against online retailers walked off with 600,000 credit cards.

Ricky Dailey

An OpenAI Agent Broke Into Australia's Medicare Database in June. The Country Found Out in September.

Sep 25, 2026

•

5 min read

An OpenAI Agent Broke Into Australia's Medicare Database in June. The Country Found Out in September.

Also: rogue AI agents found a defunct German website and used it as a secret message board for months, and ShinyHunters says it hacked the FBI.

Ricky Dailey

ai security

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Sep 23, 2026

•

5 min read

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Also: Google's AI accidentally breached three real companies during a security test and hid it for four months, and attackers are now stealing AI coding tools' memory and access tokens.

Ricky Dailey

ai security

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

Sep 21, 2026

•

5 min read

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

Also: a ransomware gang hacked a rival's dark-web site, stole the keys to their Tor server, and replaced the home page with Pokémon fan art, and the Senate is summoning the CEOs of America's biggest AI surveillance camera network.

Ricky Dailey

ai security

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

Sep 18, 2026

•

6 min read

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

Also: a $245 million cryptocurrency heist whose ringleader recruited his crew through a Minecraft server, and OpenAI quietly disclosed that its own models have been jailbreaking themselves and coordinating without permission.

Ricky Dailey

ai security

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sep 16, 2026

•

6 min read

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.

Ricky Dailey

sandworm

Sep 14, 2026

•

6 min read

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.

Ricky Dailey

privacy

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Sep 11, 2026

•

5 min read

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

Ricky Dailey

developer tools

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Sep 9, 2026

•

5 min read

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

Ricky Dailey

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Sep 7, 2026

•

4 min read

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Also: a Google engineer accidentally took down part of the cloud by unplugging every fiber cable he could find, and OpenAI stayed quiet for months about its own AI hijacking a wiki to cheat on tests.

Ricky Dailey

healthcare

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Sep 4, 2026

•

4 min read

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Also: Russian hackers hid a fake nuclear weapon request inside their malware to trick AI security tools, and an Iran-linked hacking group is using fake coding interviews to plant backdoors on job seekers' laptops.

Ricky Dailey

healthcare

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Sep 2, 2026

•

4 min read

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

Ricky Dailey

ai security

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Aug 31, 2026

•

4 min read

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

Ricky Dailey

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Aug 28, 2026

•

6 min read

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

Ricky Dailey

threat-intelligence

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Aug 26, 2026

•

6 min read

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.

Ricky Dailey

Ricky Dailey

Eight Keys That Can Vouch for Any Website Leaked. Browsers Cut Them Off in Hours.

173 Microsoft 365 Tenants Let an Attacker Walk In Through Their Backup App

Attackers Spent 10 Days Rooting Fully Patched Ivanti VPNs Before the Warning Came

A Ledger Reseller's Wallets Had a Hidden Implant. Suspected Losses Top $93M.

China's Hacking Contractor Built a Portal for Browsing Other People's Stolen Email

It Took 190 Million Stolen Records to Get Hospital Cybersecurity Rules Through the Senate

8.8 Million Danish ID Records Walked Out Through One Small Company's Login

Ransomware Hit a Water Utility Through SharePoint. Three Others Fell the Same Way.

An AI Ransomware Gang Wiped Entire Azure Environments in Seven Minutes.

Apple Patched a CoreGraphics Zero-Day. The Attack Was Sophisticated Enough That Meta Spotted It First.

Defenders Blocked the Oracle PeopleSoft Exploit. So Attackers Rebuilt It.

An OpenAI Agent Broke Into Australia's Medicare Database in June. The Country Found Out in September.

The Criminal AI Service That Read Victims' Inboxes Before Robbing Them Hit 12,000 Microsoft Accounts

Hackers Turned Brevo's Marketing Infrastructure Into a Malware Delivery Network for 100,000 Websites

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

153 Million Driver's Licenses Are Now Up for Sale, Courtesy of an ID-Verification Company

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

STAY CONNECTED