The Student Never Opened the Message
A Serbian student's iPhone got Pegasus with zero taps. See what that means for cybersecurity programs that still treat phones as perks. Check your MDM list.
September 2026
Gig Laptops Turn Client Access Into Free Infrastructure
A malware crew hit 80,000 freelance PCs your cybersecurity program never inventories. Lock contractor access before the next campaign. Read how.
One Compromised Router. Months of Trusted Access.
Fire Ant turned compromised routers into trusted launchpads. See how that breaks cybersecurity telemetry, and what to lock down this week.
August 2026
ClaudeBot Came Looking for Your Secrets
Fake AI crawlers are probing .env files under famous names. See how this cybersecurity blind spot works, then check your logs.
Your Intel Feed Just Ate a Retraction
The DoJ walked back a China "victim" claim. If your cybersecurity tickets copy press releases, you're briefing fiction. Fix the queue.
The Bug With No CVE Score Drained Six Blockchains
Six blockchains got drained by a bug with no CVE score. Here's what that gap in cybersecurity risk scoring means for your team. Read on.
Chrome’s Store Approved 19 Wallet-Draining Extensions in Six Months
19 browser extensions quietly drained crypto wallets for months. Here's what it means for cybersecurity teams still trusting the app store. Read on.
Your Router Came With A Second Owner
Factory-built router backdoors and a new grid hardware ban show cybersecurity now starts before the device is even plugged in.
OpenAI’s Own AI Agent Breached Hugging Face
An OpenAI cybersecurity test turned into a real breach of Hugging Face. Here's what reward hacking means for your AI agent controls.
The Guy Who Couldn’t Stop Bragging About His Malware
TeamPCP's years-long supply chain spree fell to loose lips, not cybersecurity tooling. Here's what that gap means for your defenses.