vulnerability

ai security

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Sep 16, 2026

•

6 min read

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

Also: an airport company described four years of API keys in plain-sight JavaScript as "a sophisticated hack," and Texas became the first state to win a court ruling that TikTok lied to parents.

Ricky Dailey

privacy

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Sep 11, 2026

•

5 min read

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

Also: some hackers drained $320 million from a crypto network and sent a polite blockchain note asking for a bug fix, and the EU's mandatory incident reporting law kicked in today.

Ricky Dailey

developer tools

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Sep 9, 2026

•

5 min read

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Also: a ransomware gang published the ATF's own criminal investigation files after hacking the agency, and a malicious .git config can hijack Claude Code before you see any warning.

Ricky Dailey

healthcare

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Sep 4, 2026

•

4 min read

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

Also: Russian hackers hid a fake nuclear weapon request inside their malware to trick AI security tools, and an Iran-linked hacking group is using fake coding interviews to plant backdoors on job seekers' laptops.

Ricky Dailey

healthcare

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Sep 2, 2026

•

4 min read

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

Also: fraudsters cloned a stranger's credit card off their own phone in a 13-minute scam call, and a bug in software used by hospitals, schools, and governments everywhere is already under attack.

Ricky Dailey

ai security

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Aug 31, 2026

•

4 min read

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

Also: a DDoS botnet started renting out hacked smart devices as a side hustle, and a ransomware crew ran an AI coding assistant through victims' networks to break in faster.

Ricky Dailey

ai security

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Aug 28, 2026

•

6 min read

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

Also: a ransomware gang's own guy started scamming its victims behind its back, and a Chinese hacking crew quietly ran wild inside a perfect-10 Oracle bug for seven months before anyone noticed.

Ricky Dailey

threat-intelligence

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Aug 26, 2026

•

6 min read

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

Also: a Florida man's ChatGPT search stopped his wife from losing more to a fake jury duty scam, and a perfect-10 SAP bug used by 99 of the world's 100 biggest companies is already under attack.

Ricky Dailey

ai security

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Aug 17, 2026

•

5 min read

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Also: DEF CON attendees allegedly jammed a Delta flight's WiFi to phish fellow passengers mid-air, and Clop's ransomware spree just hit Shell, GE, and Philips.

Ricky Dailey

ai security

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Aug 14, 2026

•

6 min read

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

Also: a cyberattack on Japan's biggest cold-storage company turned into a national KFC crisis, and ransomware locked hospital doors and killed the HVAC at Manitoba's largest hospital.

Ricky Dailey

ai security

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Aug 12, 2026

•

4 min read

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

Also: a ransomware gang hijacked a hospital's Facebook page to post its ransom demand, and North Korean hackers hid a Windows zero-day inside fake job offers to target defense contractors.

Ricky Dailey

ai security

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

Aug 10, 2026

•

6 min read

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

Also: an IT department taped everyone's login credentials to their laptops and a contractor used them to break in, and a Senate hearing revealed AI fraud cost seniors $7.7 billion last year.

Ricky Dailey

ai security

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Aug 7, 2026

•

6 min read

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

Also: a hacker who couldn't hack breached 14 US companies with vague AI prompts, then got caught asking Claude to edit his resume, and a self-spreading worm just infected npm packages with 2 billion weekly downloads.

Ricky Dailey

ai security

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

Aug 5, 2026

•

4 min read

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

Also: a robot vacuum flaw let hackers spy through your camera and steal your WiFi password, and 114,000 UK police officers just had their contact info dumped on the dark web.

Ricky Dailey

ai security

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

Jul 31, 2026

•

6 min read

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

Also: a ransomware gang extorted a rival ransomware gang and posted an apology on its own victim's site, and an AI music startup's 55 million users just learned their breach happened nine months before anyone told them.

Ricky Dailey

ai security

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Jul 22, 2026

•

5 min read

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Also: a ransomware gang that checks your GPS before asking for $200, and an autonomous AI agent ran a full hack against Hugging Face with no human driving.

Section 702 just expired. Congress votes again in 4 days.

Jun 19, 2026

•

6 min read

Section 702 just expired. Congress votes again in 4 days.

Also: a ransomware gang stopped Australia's sugar harvest without leaving a ransom note, and ShinyHunters just hit Europe's human rights watchdog.

Ricky Dailey

vulnerability

China's Hackers Found a New Browser Exploit Kit. Four Separate Groups Were Using It Within Days.

ShinyHunters Says It Has Florida's Driver Database. It Used Jeffrey Epstein's Record to Prove It.

JetBrains Got Hacked Through a Bug in JetBrains. The Credentials Your Pipeline Was Storing Are Gone.

Attackers Turned a Login Bypass Into Full Admin Control of JFrog Artifactory in Three Days

ShinyHunters Wants $55 Million From McKesson. The Deadline Already Passed.

A Ransomware Gang Tried to Blackmail Germany's Capital. Berlin Said No.

A Cyberattack Just Froze Global Shipments of Pacemakers and Defibrillators

ShinyHunters Tried to Hack a Cybersecurity Firm by Pretending to Be Its Own Security Team

An AI Agent Ran a Full Cyberattack on Taiwan's Government With No Human Driving

Microsoft Threatened Him With "Legal Action." He Responded With a Working Windows Defender Exploit.

A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club

A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup

A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.

One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches

A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.

ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In

Section 702 just expired. Congress votes again in 4 days.

STAY CONNECTED