The Fake Docker Provider Cost 222 Pulls
A fake Docker Terraform provider hit 222 pulls on HashiCorp. See what that means for your cybersecurity stack, then lock the registry path.
September 2026
They Called the Plant Mature Anyway
Honeywell found 88% of OT programs called mature and 21% fully inventoried. That's a cybersecurity fiction. Walk one cell this week.
The mint sat on the side you published
F5's exploited OAuth bug put a shell on the token issuer. Check your cybersecurity patch order against this week's front-door flaws.
80,000 Relays. Months of Model Theft
80,000 AI relays clone frontier models while your cybersecurity logs call them customers. Audit the keys before the copy ships.
A Takedown Does Not Kill a Stolen Session
EvilTokens is down, but stolen device-code sessions still beat most cybersecurity controls. Check your OAuth grants before the next kit stands up.
Talos Catalogued an Implant With No Pilot
CLOSEDQUORUM picks its own next move. If your cybersecurity still hunts tired operators, start with the controls here.
That Remote Laptop Never Left Town
Japan busted a laptop farm. If your cybersecurity still trusts a shipped Mac, start with the ship-to address. Audit it today.
The Fine Missed Every Street Camera
Google's $463M location fine didn't catch street cameras. See what your cybersecurity inventory still misses, then cut the extra copies.
Your Group Policy Is a Hostile Sysadmin Now
PAYLOAD ransomware now lives in Group Policy. Here's the cybersecurity work your EDR will not do for you. Check those GPO ACLs.
The Backdoor Wants the File You Just Saved
A Windows backdoor that waits for your next save should worry you more than the ransomware slide. Audit your cybersecurity hunts.