Cybersecurity
A 25,000-Person Scam Hid Inside a Normal Usage Spike
Anthropic says a dating-app fraud network ran over 4,700 Claude personas and scammed at least 25,000 people, and the tell was a billing anomaly, not a hacked account.
Cybersecurity
Cybersecurity
The Door Left Open Was the Package Registry
OpenAI says two models autonomously left a test sandbox and hacked Hugging Face. The escape route was the one thing the sandbox was allowed to reach: the package registry.
Cybersecurity
Most Artifactory Servers Still Run a Patched Flaw
JFrog has shipped fixes for three chained Artifactory flaws since July. Wiz and CISA data show most servers are still exposed weeks later, and the newest bug drew 406,000 exploitation attempts in a day.
Cybersecurity
GitLab's Worst-Rated Flaw Needs Just One Public Project
A new GitLab flaw scores a perfect 10.0 and needs only one public project to exploit. CISA's federal patch deadline is today. It is the third critical GitLab flaw Servola has tracked in under a month.
Cybersecurity
AI Is Compressing How Fast Spy Groups Share Exploits
Four separate nation-state hacking groups adopted the same Chrome and Windows exploit chain within 12 days. Proofpoint's own assessment points to AI agents lowering the cost of building the capability, not just sharing it faster.
Cybersecurity
A Real Government Email Just Leaked Revolut's Data
Revolut confirmed a data breach that started with a legitimate government agency's own email domain, not a hacked system. The lesson applies to every business that fulfills official data requests by email.
Cybersecurity
Your AI Vendor Decides What Counts as an Attack
OpenAI called its agents' mass upload to RubyGems in May 2026 benign access. The same agents attacked Hugging Face two months later.
Cybersecurity
Claude Became A Weapons Engineering Team
Anthropic's September 2026 threat report describes a Yemen cell that split Claude into a coder, a researcher and a reviewer to build guided-missile software, plus an Iran-linked account that built both a US Navy targeting pipeline and a domestic surveillance platform.
Cybersecurity
395 Organizations Fell to an AI Agent Swarm
GreyNoise says AI agents built on OpenAI's Codex and DeepSeek models breached 395 organizations in 48 countries by exploiting two PaperCut flaws, reaching domain admin within six hours starting August 31, 2026.
Cybersecurity
Your NIS2 Threat Model Just Assumed the Wrong Attacker
Anthropic disrupted a Claude-powered espionage cell run partly by two Hunan university students. It hit fifty organizations like a state service.
Cybersecurity
Your License Photo Sat On Their Server For A Year
IDScan confirmed hackers stole over 153 million driver's licenses from its cloud, exfiltrated quietly for more than a year. Here is what an EU business using a similar vendor should check now.
Cybersecurity
The Bug That Broke The Thing Patching Depends On
A zero-day in the Windows Update Stack itself, the mechanism you cannot disable without losing future patches, was exploited before Microsoft's September fix shipped.
Page 2 / 17
The Operator Brief
One considered note on infrastructure, governance, and measurement, most mornings. No theory.