A Banana Allergy Landed on a Reporter’s Desk
Hackers showed reporters FBI blood tests and allergy notes. Treat clinic portals as cybersecurity production, then check who can export yours.
September 2026
Monday’s Stormcast Never Opened a Ticket
Monday's cybersecurity briefing played in the commute. The ticket queue didn't. Here's the 20-minute ritual that turns intel into work.
Your Logs Called This Years Ago
Automated traffic just outran humans. Check what that does to your cybersecurity controls before the next agent looks like an attack.
One Screenshot App. 23.6 Million Records.
A screenshot app leaked 23.6 million records. See how cybersecurity teams lock down capture tools, SharePoint, and analyst desks. Check your list.
The Restricted Note Took Citrix Offline
A leaked Dutch note unplugged Citrix NetScaler this weekend. Here's the cybersecurity play if your gateway is still live. Check your exposure.
Nice Driver. Shame About the Sensors.
Lunex used an AMD driver to mute cybersecurity sensors, then stole browser cookies. See what to page on when your watchers go quiet.
The Safety Channel Can’t See Stolen API Keys
A US-China AI hotline won't catch the botnet draining your keys. See what your cybersecurity program should lock down first.
PeopleSoft Became a Global Web Shell Farm
PeopleSoft is serving web shells past WAFs. If your cybersecurity still ends at the proxy, hunt the ERP first.
Can You Hunt a Payload You Cannot Decrypt?
PamStealer hides behind live C2 decryption, so first-stage capture is a cybersecurity dead end. See what your IR playbook should do next.
When Cybersecurity Detection Fires After the Money Leaves
Alerts fired. $351M still left. Late cybersecurity is a receipt, not a control. Check the transfer-window fixes.