Ordinary Infrastructure, Extraordinary Exposure: This Week’s Threat Patterns
From compromised streaming devices to poisoned dependencies and manipulated AI agents, this week's incidents share…
Year: 2026
France Sets Hard Deadlines for Post-Quantum Encryption Transition
French cybersecurity agency ANSSI will stop certifying non-quantum-safe products from 2027, forcing government and critical…
SkillCloak Research Exposes Blind Spot in AI Agent Security Scanning
A new study finds that static scanners designed to detect malicious add-on skills for AI…
Sysdig Documents First Known End-to-End Agentic Ransomware Attack Driven by an LLM
A threat actor used an AI agent to autonomously exploit, pivot, encrypt, and extort a…
FBI Seizes NetNut Proxy Network and Popa Botnet Infrastructure
A coordinated law enforcement and industry action has dismantled a residential proxy service linked to…
NCSC Distils Pen Tester Wisdom Into Practical Hardening Advice
The UK's National Cyber Security Centre has published guidance drawn from penetration testing experience to…
FortiBleed Credential Campaign Tied to INC and Lynx Ransomware Operations
Stolen Fortinet credentials harvested in the FortiBleed campaign appear to be feeding a pipeline for…
Oracle E-Business Suite Vulnerability Exploited Before Public Proof-of-Concept Emerged
Targeted exploitation of a critical EBS flaw within six weeks of patching signals a capable…
An AI Model Found the Bypass a Researcher Couldn’t: Lessons From the Front Gate Tickets Breach
A bug bounty researcher used Anthropic’s Claude Opus 4.7 to defeat a web application firewall…
Exposed AI Endpoints Are Being Weaponised by Attackers
Unsecured AI inference endpoints are giving threat actors ready-made infrastructure for offensive operations, no credentials…