← Feed

Posts

• View post

  Don't miss today's Metacurity for the most crucial infosec developments you should know today, including --DHS orders DeepSeek out of federal civilian systems, --FBI probe uncovers ransomware negotiators’ close ShinyHunters ties, --Army wants AI agents to hack and disable enemy systems, --OpenAI bugging suspect held without bail amid Saudi royal ties, --WhatsApp chatbot instructions told users not to contact regulators, --Hackers reportedly steal 421k emails from Germany’s far-r...

• View post

  The Dutch NCSC website status right now. "Due to vulnerabilities in PHP, we have temporarily taken the NCSC website offline as a precaution. We're working to get the website back up and running as quickly as possible. For updates, please check out advisories.ncsc.nl (Dutch only)." h/t @ciaranmartin https://www.ncsc.nl/index-en.html

• View post

  I rose early to get Metacurity out before 10 am ET, when, apparently, chaos could reign for PHP-enabled sites. So don't miss today's issue for more on this crucial development and other critical infosec news you should know, including --Weak eMudhra keys trigger massive internet security cleanup, --Russian hackers breach NATO defense firms and police agency, --Delivery robots face lawsuits over alleged biometric scans, --State Bank of India breach exposes nearly 4k customer rec...

• View post

  In today's Metacurity, I managed to wrestle yesterday's firehose of PHP patch-related news into sixteen paragraphs, in case you're short on time for some reason. Also in today's issue are tons of other critical infosec developments you should know, including --Claude flags 493 security gaps across 25 open-source projects, --OpenAI agents disable safeguards meant to monitor them, --Interpol operation nets 1.4k arrests and recovers $105m in African cybercrime op,...

• View post

  Disgraced eMudhra drops out of TLS business after using cert private key of 4 https://arstechnica.com/security/2026/10/disgraced-emudhra-drops-out-of-tls-business-following-certificate-debacle/?mid=1#cid=3769663

• View post

  North Korean internet was hit by DDoS cyberattack, network monitoring firm says https://www.reuters.com/world/china/north-korean-internet-was-hit-by-ddos-cyberattack-network-monitoring-firm-says-2026-10-23/?mid=1#cid=3770580

• View post

  Resident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts https://www.ign.com/articles/resident-evil-developer-capcom-issues-phishing-warning-after-data-breach-hits-over-11-million-customer-accounts

• View post

  "The effort [to thwart PHP vulnerability exploitation] was aided, inadvertently, by the current limits of some widely available AI models, which did not appear to be very helpful at exploiting the vulnerabilities." https://www.nbcnews.com/tech/security/hackers-php-flaws-cybersecurity-crisis-rcna605112

• View post

  AI-discovered bugs may soon trigger fresh disruptions, cyber experts say https://www.reuters.com/legal/litigation/ai-discovered-bugs-may-soon-trigger-fresh-disruptions-cyber-experts-say-2026-10-23/

• View post

  Somehow I missed this... https://www.theregister.com/security/2026/10/22/php-blames-supply-chain-security-biz-chainguard-for-putting-huge-chunks-of-the-web-at-risk/5304611

• View post

  Before you leave for the weekend after this seriously intense cyber week, check out today's Metacurity for the most important infosec developments you should know, including --Banks scramble to keep uncontrolled AI agents out of customer accounts, --eMudhra quits cert business after browsers pull trust, --PHP flaws spark alarm but little confirmed damage, --PHP crisis blacks out SoftBank disaster alerts as Japan plans AI cyber team, --Capcom breach exposes 11.7m customer email records,...

• View post

  "His AI assistant found a way to book the gym class months further in advance than the gym allowed, thanks to a vulnerability it discovered in the booking software. Then [it kicked] someone out of the waiting list who was ahead of Andrew." https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986

• View post

  Anthropic opens its most powerful AI models to more security teams https://www.reuters.com/legal/litigation/anthropic-opens-its-most-powerful-ai-models-more-security-teams-2026-10-06/

• View post

  Inside the secretive cyberweapons company that won over Israel’s intelligence elite https://irpimedia.irpi.eu/en-inside-the-secretive-cyberweapons-company-that-won-over-israels-intelligence-elite/

• View post

  China bogeyman looms large over American firms’ AI doomsday scenario https://www.theguardian.com/technology/ng-interactive/2026/sep/19/china-ai-foreign-policy-dario-amodei?mid=1#cid=3722814

• View post

  God help us all Trump to Name AI Czar While Rejecting Safety Risks as a Hoax https://www.bloomberg.com/news/articles/2026-09-19/trump-to-name-ai-czar-while-rejecting-safety-risks-as-a-hoax

• View post

  An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang https://www.wired.com/story/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang/

• View post

  Not behind a paywall The era of AI warfare has arrived https://www.ft.com/content/686429c0-daf3-42a5-9b7c-7ff06eb291ef?accessToken=zwAAAaFF76C6lM8LRcsBf2JBxdOMSBDEfy4a5s8feLaSQ4lJodO9SJAyUswoL89oZCnA2vNCpdObfH_wbrKR79OO2kEvyu1LMdO97rdvyfO6ggE.MEYCIQDk_nprY5ALiEYBTFI1-MWq-aMUgdqVq04zBBUmMP547QIhAO009JNLGixOg1Opoe8lFRxtiKD3Iu4MhkYbOBjKpHm9&segmentId=7d4bcc2e-e664-92ba-62e3-5590579f1902&syn-25a6b1a6=1

• View post

  The fact that AI safety testing doesn't bring in cyber pros was the subject of several conversations I had at the Google Cyber Defense Summit yesterday. Also yesterday, Rob T. Lee of SANS asked for that very same thing to be done https://robtlee73.substack.com/p/secure-what-is-already-here-doom-scenarios-cybersecurity-aisecurity

• View post

  OpenAI delaying IPO amid AI safety concerns, Sam Altman says https://www.axios.com/2026/09/12/openai-public-ipo-delay-sam-altman?stream=top&utm_source=alert&utm_medium=email&utm_campaign=alerts_all

• View post

  Iran-linked hackers claim North Texas outage as AT&T points to cable theft https://www.cbs19.tv/video/news/local/iran-linked-to-cable-theft/501-9d9451ad-6fcb-4825-91ae-01c5b6b72d77

• View post

  Here we go again OpenAI to limit access to Astra's most powerful cyber tools https://www.axios.com/2026/09/01/openai-astras-cyber-critical?stream=technology&utm_source=alert&utm_medium=email&utm_campaign=alerts_technology

• View post

  Don't miss today's Metacurity for the most crucial developments cyber defenders should know, including --OpenAI loosens GPT-5.6 cyber guardrails for vetted defenders, --Anthropic to watermark Claude output worldwide, --Gunra ransomware targets critical infrastructure through Fortinet flaws, --WormGPT creator faces trial in Portugal --Ransomware disrupts systems at Winnipeg’s largest hospital, --China-linked hackers exploit N-central flaw to deploy ransomware, --AI-found Zoom flaws enabl...

• View post

  So eight people posed as would-be sugar daddies on a Hong Kong dating website, offering to pay victims HK$50,000 and HK$70,000 a month if they paid a so‑called legal fee in order to receive the money. They earned $6.2 million over two years doing this. https://news.rthk.hk/rthk/en/component/k2/1865627-20260810.htm?mid=1#cid=3662624

• View post

  Thailand is just now considering MFA for its government systems. Govt eyes stronger cyber defences as data leaks raise alarm https://www.bangkokpost.com/thailand/general/3299002/govt-eyes-stronger-cyber-defences-as-data-leaks-raise-alarm

• View post

  So Korean institutions -- government, private sector, political parties -- treat data breaches the way they should be treated. The latest incident: the Democratic Party of Korea publicly apologized *within 3 days* for a breach exposing data from over 17k members. https://www.youtube.com/shorts/My1ltsiw0jY

• View post

  https://www.techmeme.com/260809/p16#a260809p16

• View post

  https://www.bybit.com/en/press/post/bybit-sues-north-korea-and-lazarus-group-secures-preliminary-injunction-freezing-stolen-assets-in-landmark-crypto-asset-recovery-effort-bb55bb16f1710f487aa Bybit Sues North Korea and Lazarus Group, Secures Preliminary Injunction Freezing Stolen Assets in Landmark Crypto Asset Recovery Effort

• View post

  Each Saturday, Metacurity puts out an infosec long-reads issue that covers pieces we couldn't get to during the crush of breaking news. https://www.metacurity.com/trust-under-pressure-best-infosec-long-reads-8-8-26/ They're all worth reading, but in an unusual move, I want to flag my two favorites. First, Toronto Life's Malcom Johnston proves that the envious couple in the upscale suburb might very well be multi-million-dollar phone scammers. https://torontolife.com/deep-dives/th...

• View post

  Australia’s privacy tsar warns new laws may be needed for smart glasses https://www.perthnow.com.au/news/australias-privacy-tsar-warns-new-laws-may-be-needed-for-smart-glasses-c-22691216?mid=1#cid=3658889