UK issues alert over Russian zero-click email attacks
The UK's National Cyber Security Centre (NCSC) issued an alert regarding a new 'zero-click' threat campaign orchestrated by Russian state-backed hackers targ...
general
20 articles
GitHub to implement two-tier bug bounty program amid AI-generated report surge
GitHub is launching a two-tier bug bounty program starting July 27, 2026, in response to an increase in low-quality, AI-generated vulnerability reports.
Illinois man sentenced to over six years for hacking Snapchat accounts and distributing CSAM
Coverage from Bleeping Computer indicates that an Illinois man has been sentenced to 76 months in prison for hacking into the Snapchat accounts of over 750 w...
AI assistant used in cyberattack on Thailand's Ministry of Finance
An open-source AI assistant named Hermes was used in a cyberattack targeting Thailand's Ministry of Finance, compromising sensitive personnel data and intern...
US to deny visas to foreign nationals involved in cybercrime
The United States will deny visas to foreign nationals involved in cybercrime, with potential extensions to their immediate families, according to a recent r...
Europol targets 'The Com' extremist network, removing thousands of harmful URLs
As detailed in Bleeping Computer, Europol announced a significant operation targeting "The Com," a decentralized network of violent extremist groups responsi...
How to Build an Attack Surface Management Operating Model
The ASM six-stage chain runs discovery → classify → assign → route → reduce → monitor.
How to Evaluate ASM Platforms
ASM platform failures occur because executives approve purchases based on discovery validation while discounting classification and routing gaps
What Executive Exposure Risk Reporting Actually Requires
Leaders need decision inputs rather than performance measurements
Friday Squid Blogging: Illex Squid Catch in the Falklands
Lower catch this year. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Rogue AI Vehicle Porn, OpenAI, Nudes, Clop, Patches, Oracle, Palo Alto, Aaran Leyland - SWN #601
Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks
The administration set a target date of September for CISA to finalize the rule, but where the agency is headed remains a mystery to some. The post Industry’...
Why Attack Surface Reporting Should Change for Executives
Measure is how quickly new assets move from unknown to known, owned, and governed
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices
EU fined Google €890M under the DMA for favoring its own services and restricting Play Store competition, with AI search features also under scrutiny.
New AI, who this? 4 areas to consider when adopting agentic endpoint security
Agentic endpoint security aims to close AI's growing enterprise security gaps.
OnTrac notifies customers of data breach after network hack
OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers. [.
Despite multiple takedowns, botnets continue to grow
Roughly 1 in 4 of those compromised IPs are based in the United States, Lumen’s Black Lotus Labs said. Botnets like IPIDEA have also rebounded quickly, surpa...
Hermes AI agent used to automate attack on Thai Finance Ministry
A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's M...
IdP Dependency Mapping: How to Find Your Identity Single Points of Failure
Dependency mapping focuses on what breaks, not what exists
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages. [.