JaredFromSubway MEV bot loses $15 million in exploit
The exploit, detected by blockchain security firm Blockaid, involved an attacker creating fake cryptocurrency trading opportunities using fabricated pools an...
SC Media
20 articles
Canada's spy agency uses threat reduction powers to neutralize foreign botnets
The Federal Court granted CSIS the authority to access and alter infected servers, home routers, and Internet of Things (IoT) devices, including Ring doorbel...
Senate testimony alleges AI model breached NSA systems in hours, prompting US restrictions
Senate testimony claims Anthropic's Mythos AI model breached NSA and Cyber Command systems in mere hours, leading to a US-ordered shutdown of the model.
Trump administration accelerates transition to post-quantum encryption
The executive actions direct the government to support the quantum computing industry, building on previous efforts in artificial intelligence.
Federal court rules Trump administration's voter database illegal
The court vacated the SAVE modified system and related notices, deeming them unlawful and arbitrary.
Ukrainian hackers reportedly breach Russian Glaz/Groza combat control system
The reported breach of the Glaz/Groza combat control platform by Ukrainian hackers has exposed a range of internal documents, including manuals, patents, and...
Turing, BODS, Struwwelpeter, EO-14409, VBScript, Pixemsmash, Cloudflare, Aaran Leylan - SWN #592
Your AI agent can't be authenticated by a password reset email
AI agents expose identity gaps as machine accounts outpace governance.
Threat Intel & Security Awareness: How to Build a Proactive Cybersecurity Culture - WC #1
No more blind trust: Identity controls for AI agents
Identity solutions like Cross App Access (XAA) manage AI agents by enforcing policies, scoping access and logging activity.
FFmpeg vulnerability ‘PixelSmash’ could enable RCE via video file
An attacker can use a crafted file to trigger a heap buffer overflow and overwrite a function pointer.
4 ways to protect the company against vishing attacks
Here’s why the next social engineering wave won’t hit inboxes – it will just simply call employees on the phone.
How AI Is Reshaping Identity Security at the Infrastructure Layer - Ev Kontsevoy, Neha Duggal, Amit Masand - ASW #388
Brazil's emergency alert system investigated after 'extreme' fake alert sent
The incident occurred early Saturday, June 20, when the Defesa Civil Nacional's dispatch platform was compromised.
Majority of users still store passwords in browsers, survey finds
A survey of over 7,800 individuals across eight countries revealed that between 40% and 50% of respondents still rely on browser-based password storage for c...
Canadian healthcare organization apologizes for insensitive phishing test
The phishing test email, sent during a period of intense work for healthcare professionals implementing the new CorCare software system, contained a button t...
Underground services offer targeted credential searches from infostealer data
Researchers from Flare analyzed 470 underground forum posts between January 2025 and June 2026, revealing a service layer that bridges infostealer infections...
Anthropic updates privacy policy to require government ID for some users
The updated policy states that in certain circumstances, users may be asked to provide a scan of a government-issued passport or driver's license, along with...
Amazon Prime Day fuels surge in malicious domains, researchers warn
Check Point Research has identified 6,843 new Amazon-themed domains registered between December and May, with nearly 10% flagged as malicious or suspicious.
London Hydro customer data potentially compromised in security incident
The utility disclosed that names, addresses, email addresses, phone numbers, account and billing numbers, service addresses, pricing plans, contract start da...