cybersecurity

ai security

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

Sep 18, 2026

•

6 min read

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

Also: a $245 million cryptocurrency heist whose ringleader recruited his crew through a Minecraft server, and OpenAI quietly disclosed that its own models have been jailbreaking themselves and coordinating without permission.

Ricky Dailey

ai security

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sep 16, 2026

•

6 min read

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.

Ricky Dailey

sandworm

Sep 14, 2026

•

6 min read

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.

Ricky Dailey

privacy

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Sep 11, 2026

•

5 min read

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

Ricky Dailey

developer tools

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Sep 9, 2026

•

5 min read

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

Ricky Dailey

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Aug 28, 2026

•

6 min read

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

Ricky Dailey

threat-intelligence

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Aug 26, 2026

•

6 min read

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.

Ricky Dailey

ai security

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

Aug 21, 2026

•

5 min read

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

Also: a ransomware gang's own anti-detection trick broke its own encryption tool, and one web page can trick Grok into leaking your name, location, and full chat history.

Ricky Dailey

ai security

A Mystery Attacker Has Been Reading Salesforce and ServiceNow Data Worldwide for 17 Months

Aug 19, 2026

•

5 min read

A Mystery Attacker Has Been Reading Salesforce and ServiceNow Data Worldwide for 17 Months

Also: a real-time deepfake mask glitched for less than a second and blew a fraudster's cover, and a $100 coin-sized gadget can hijack a Boeing 737's flight computers in under a minute.

Ricky Dailey

ai security

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Aug 17, 2026

•

5 min read

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Also: DEF CON attendees allegedly jammed a Delta flight's WiFi to phish fellow passengers mid-air, and Clop's ransomware spree just hit Shell, GE, and Philips.

Ricky Dailey

ai security

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Aug 14, 2026

•

6 min read

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Also: a cyberattack on Japan's biggest cold-storage company turned into a national KFC crisis, and ransomware locked hospital doors and killed the HVAC at Manitoba's largest hospital.

Ricky Dailey

ai security

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Aug 12, 2026

•

4 min read

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Also: a ransomware gang hijacked a hospital's Facebook page to post its ransom demand, and North Korean hackers hid a Windows zero-day inside fake job offers to target defense contractors.

Ricky Dailey

ai security

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

Aug 10, 2026

•

6 min read

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

Also: an IT department taped everyone's login credentials to their laptops and a contractor used them to break in, and a Senate hearing revealed AI fraud cost seniors $7.7 billion last year.

Ricky Dailey

ai security

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Aug 7, 2026

•

6 min read

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Also: a hacker who couldn't hack breached 14 US companies with vague AI prompts, then got caught asking Claude to edit his resume, and a self-spreading worm just infected npm packages with 2 billion weekly downloads.

Ricky Dailey

ai security

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

Aug 5, 2026

•

4 min read

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

Also: a robot vacuum flaw let hackers spy through your camera and steal your WiFi password, and 114,000 UK police officers just had their contact info dumped on the dark web.

Ricky Dailey

ai security

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

Aug 3, 2026

•

5 min read

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

Also: an ad company's hacked script quietly rewrote people's crypto wallet addresses, and Anthropic caught its own Claude models hacking three real companies during a safety test.

Ricky Dailey

ai security

The Department of Homeland Security Just Got Hacked. Again.

Jul 3, 2026

•

4 min read

The Department of Homeland Security Just Got Hacked. Again.

Also: hackers shoveled snow for network admin access, and the Supreme Court just said your location data needs a warrant.

Ricky Dailey

kddi

+11

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

Jun 29, 2026

•

6 min read

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.

hacktivist

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

Jun 26, 2026

•

8 min read

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.

Scattered Spider

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Jun 24, 2026

•

6 min read

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Also: The casino hacker who bragged to journalists mid-attack lasted one day at trial, and Apple's iPhone schematics are now leaking online.

Section 702 just expired. Congress votes again in 4 days.

Jun 19, 2026

•

6 min read

Section 702 just expired. Congress votes again in 4 days.

Also: a ransomware gang stopped Australia's sugar harvest without leaving a ransom note, and ShinyHunters just hit Europe's human rights watchdog.

Ricky Dailey

cybersecurity

CenterPoint Energy Lost 7.5 Million Customer Records. It Found Out From a Dark Web Post.

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

A Mystery Attacker Has Been Reading Salesforce and ServiceNow Data Worldwide for 17 Months

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

The Department of Homeland Security Just Got Hacked. Again.

Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.

A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Section 702 just expired. Congress votes again in 4 days.

STAY CONNECTED