ransomware

sandworm

Sep 14, 2026

•

6 min read

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

Also: a fired employee had days of unrevoked admin access and made excellent use of them, and Iran's IRGC commander behind critical infrastructure attacks just picked up a $10 million US bounty.

Ricky Dailey

developer tools

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Sep 9, 2026

•

5 min read

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

Ricky Dailey

healthcare

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Sep 2, 2026

•

4 min read

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

Ricky Dailey

ai security

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Aug 31, 2026

•

4 min read

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

Ricky Dailey

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Aug 28, 2026

•

6 min read

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

Ricky Dailey

ai security

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

Aug 21, 2026

•

5 min read

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

Also: a ransomware gang's own anti-detection trick broke its own encryption tool, and one web page can trick Grok into leaking your name, location, and full chat history.

Ricky Dailey

ai security

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Aug 17, 2026

•

5 min read

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Also: DEF CON attendees allegedly jammed a Delta flight's WiFi to phish fellow passengers mid-air, and Clop's ransomware spree just hit Shell, GE, and Philips.

Ricky Dailey

ai security

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Aug 14, 2026

•

6 min read

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Also: a cyberattack on Japan's biggest cold-storage company turned into a national KFC crisis, and ransomware locked hospital doors and killed the HVAC at Manitoba's largest hospital.

Ricky Dailey

ai security

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Aug 12, 2026

•

4 min read

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Also: a ransomware gang hijacked a hospital's Facebook page to post its ransom demand, and North Korean hackers hid a Windows zero-day inside fake job offers to target defense contractors.

Ricky Dailey

ai security

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Aug 7, 2026

•

6 min read

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Also: a hacker who couldn't hack breached 14 US companies with vague AI prompts, then got caught asking Claude to edit his resume, and a self-spreading worm just infected npm packages with 2 billion weekly downloads.

Ricky Dailey

ai security

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

Aug 3, 2026

•

5 min read

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

Also: an ad company's hacked script quietly rewrote people's crypto wallet addresses, and Anthropic caught its own Claude models hacking three real companies during a safety test.

Ricky Dailey

ai security

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

Jul 31, 2026

•

6 min read

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

Also: a ransomware gang extorted a rival ransomware gang and posted an apology on its own victim's site, and an AI music startup's 55 million users just learned their breach happened nine months before anyone told them.

Ricky Dailey

ai security

Russian Spies Read NATO's Mail for Months. The Patch Didn't Evict Them.

Jul 29, 2026

•

4 min read

Russian Spies Read NATO's Mail for Months. The Patch Didn't Evict Them.

Also: MyPillow's Mike Lindell got his own ransomware deadline, and nobody was watching the AI agent that hacked Thailand's treasury for days.

Ricky Dailey

ai security

Hackers Took Down Romania's Land Registry. Nobody Could Buy a House for a Week.

Jul 27, 2026

•

5 min read

Hackers Took Down Romania's Land Registry. Nobody Could Buy a House for a Week.

Also: North Korea arrested its own hackers for robbing its own banks, and one bad link can plant a rogue AI agent inside your company.

ai security

Australia's Biggest Energy Company Got Hacked. 4.8 Million Customers Are Being Blackmailed.

Jul 24, 2026

•

5 min read

Australia's Biggest Energy Company Got Hacked. 4.8 Million Customers Are Being Blackmailed.

Also: a manager crashed his entire company network trying to learn Nmap, and OpenAI's own AI hacked another company just to win a test.

ai security

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Jul 22, 2026

•

5 min read

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Also: a ransomware gang that checks your GPS before asking for $200, and an autonomous AI agent ran a full hack against Hugging Face with no human driving.

ai security

Jul 20, 2026

•

5 min read

Coca-Cola's Dairy Brand Just Went Dark. Nobody's Claiming Credit.

Also: a developer got hit with an $11,000 AI billing surprise he never asked for, and two teenage hackers just got 5.5 years each for crippling London's transit system.

The Hosting Company Behind LockBit, BlackSuit, and Play Just Got Indicted

Jul 17, 2026

•

4 min read

The Hosting Company Behind LockBit, BlackSuit, and Play Just Got Indicted

Also: all it took to get root access at one company was a friendly phone call, and a hacker jailbroke Google's own AI to build a botnet in six minutes.

ai security

Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record

Jul 15, 2026

•

5 min read

Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record

Also: Egyptian hacktivists hijacked Argentina's football federation over a World Cup grudge, and a Welsh doxxing site admin got two years for turning swatting into a hobby.

ai security

A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.

Jul 13, 2026

•

4 min read

A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.

Also: a red teamer stole a $250,000 trophy by pretending to fix the office Wi-Fi, and AI coding assistants are hallucinating the exact malware names attackers want them to install.

Ricky Dailey

ai security

Accenture Got Hacked Again. This Is Its Third Time in Five Years.

Jul 10, 2026

•

4 min read

Accenture Got Hacked Again. This Is Its Third Time in Five Years.

Also: two convicted fraudsters built a bug-buying startup dangling $7 million payouts, and an AI agent ran a full ransomware attack start to finish, on its own.

ShinyHunters Hit Medtronic. 3.8 Million People Just Found Out.

Jul 8, 2026

•

4 min read

ShinyHunters Hit Medtronic. 3.8 Million People Just Found Out.

Also: a ransomware gang apologized to its own victim, and Iran's hackers may have gotten an AI assist building their malware.

ai security

The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.

Jul 6, 2026

•

5 min read

The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.

Also: a user swore a hacker named "General Failure" had invaded his PC, and an AI-built malware kit just learned to dodge nine different antivirus vendors.

ai security

The Department of Homeland Security Just Got Hacked. Again.

Jul 3, 2026

•

4 min read

The Department of Homeland Security Just Got Hacked. Again.

Also: hackers shoveled snow for network admin access, and the Supreme Court just said your location data needs a warrant.

Ricky Dailey

Scattered Spider

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Jun 24, 2026

•

6 min read

Five intelligence agencies just warned: AI cyberweapons are months away from public release

Also: The casino hacker who bragged to journalists mid-attack lasted one day at trial, and Apple's iPhone schematics are now leaking online.

ransomware

Sandworm Is Actively Exploiting a Cisco Firewall Hole That Hands Attackers Root Access

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Japan's Biggest Cloud Provider Found a 1.36-Million-Account Breach by Accident

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

Russian Spies Read NATO's Mail for Months. The Patch Didn't Evict Them.

Hackers Took Down Romania's Land Registry. Nobody Could Buy a House for a Week.

Australia's Biggest Energy Company Got Hacked. 4.8 Million Customers Are Being Blackmailed.

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Coca-Cola's Dairy Brand Just Went Dark. Nobody's Claiming Credit.

The Hosting Company Behind LockBit, BlackSuit, and Play Just Got Indicted

Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record

A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.

Accenture Got Hacked Again. This Is Its Third Time in Five Years.

ShinyHunters Hit Medtronic. 3.8 Million People Just Found Out.

The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.

The Department of Homeland Security Just Got Hacked. Again.

Five intelligence agencies just warned: AI cyberweapons are months away from public release

STAY CONNECTED