All writing

T2026-11-14Morning Threat Brief: Check Point gateways hacked to root with a wiper waiting, ransomware wipes a VMware estate with no hypervisor bug, the FBI disrupts a $400M fake video call scam, and AI agents break in under three hoursThreat Brief T2026-11-13Morning Threat Brief: Attackers hijack ScreenConnect panels to hit 288 endpoints, a new N-central zero-day beats the emergency patch, police seize StealC servers, and Citrix patches 10 critical flawsThreat Brief T2026-11-12Morning Threat Brief: 30-plus N-central zero-days under attack, a new Windows flaw with no patch, Xen Orchestra logins bypassed, and Maersk confirms a breachThreat Brief T2026-11-11Morning Threat Brief: Microsoft patches an exploited Outlook zero-day in a record Patch Tuesday, Barracuda flaws chain to root with a Friday deadline, SAP patches four perfect 10s, and Vanderbilt's attacker claims a million SSNsThreat Brief T2026-11-10Morning Threat Brief: Chrome patches its eighth exploited zero-day of 2026, Fireworks AI is breached again, CISA adds four exploited flaws, and Vanderbilt is hitThreat Brief T2026-11-09Morning Threat Brief: A cloud host tells every customer to rotate all keys, your AI coder may have posted your passwords on GitHub, a retailer breach hits 7.7 million, and a data broker's SSNs are claimed exposedThreat Brief T2026-11-07Morning Threat Brief: Your VPN's MFA can be bypassed, a runaway AI agent breached a company, crypto investigators lost every customer's credentials, and SSH has a no-password bugThreat Brief T2026-11-06Morning Threat Brief: Ransomware reached the hypervisor through a monitoring tool, a library system goes dark, freezers draw a federal warning, and DigiCert confirms a breachThreat Brief T2026-11-05Morning Threat Brief: An old Apple bug joins KEV as APT29 poisons websites, a perfect 10 Metabase flaw is still being hit, DreamHost confirms a two month breach, and WhiteArmor names UnileverThreat Brief T2026-11-04Morning Threat Brief: WordPress joins KEV with a Friday deadline, a Zyxel patch that did not patch, a perfect 10 Node-RED flaw under attack, and ransomware that may have run on autopilotThreat Brief T2026-11-03Morning Threat Brief: Ivanti patches the last two VPN zero-days, Synology boxes hit by C3RB3R, a security tool turned backdoor, and Google kills a 1.3 million box botnetThreat Brief T2026-11-02Morning Threat Brief: BeyondTrust probes widen, Trigger.dev secrets exposed, BTCPay hot wallets drained, and the Amadeus breach widensThreat Brief T2026-11-01Morning Threat Brief: FBI names North Korea in the $6.3 billion Binance theft, Chainalysis breached by agentic AI, and Northflank customers told to rotate everythingThreat Brief T2026-10-30Morning Threat Brief: GitLab 10.0 hits KEV, Cisco joins it, and a $6.3 billion theftThreat Brief T2026-10-29Morning Threat Brief: Linux kernel chain to root, VMware logging blind spot, and Cisco firewalls crashingThreat Brief T2026-10-28Morning Threat Brief: PolyShell and Brotli hit KEV, Apple patches 286 bugs, and a fake IT desk in TeamsThreat Brief T2026-10-27Morning Threat Brief: PHP2Shell hits KEV with an October 29 deadlineThreat Brief T2026-10-26Morning Threat Brief: FortiSIEM is now being exploited, PHP2Shell RCE confirmed, and an unverified J.B. Hunt claimThreat Brief T Oct 25, 2026 Morning Threat Brief: 70,000 firewall credentials harvested from the edge → T Oct 24, 2026 Morning Threat Brief: CISA confirms the Collabora Nextcloud flaw is being exploited, and a Qilin bank listing that proves nothing yet → T Oct 23, 2026 Morning Threat Brief: VeloCloud zero-day turns read-only logins into superusers, Signal calls that never hang up → T Oct 22, 2026 Morning Threat Brief: PHP2Shell exploited before the patch, LiteLLM poisoned on PyPI → T Oct 21, 2026 Morning Threat Brief: SafePay at 600 victims, Qilin and INC hit GlobalProtect → T Oct 20, 2026 Morning Threat Brief: 11M Records Gone, 38 Ships on a Ransom List → T Oct 19, 2026 Morning Threat Brief: The 20-Year-Old Flaw in Every Apple Device → T Oct 17, 2026 Morning Threat Brief: The Support Tool That Became a Skeleton Key → T Oct 16, 2026 Morning Threat Brief: A Phone Call, a Billion Phish, and a Fraud Ring → T Oct 15, 2026 Morning Threat Brief: Two New Zero-Days Hit Your Edge →

AI Oct 24, 2026 CrowdStrike and NVIDIA take AI agent security into silicon → AI Oct 24, 2026 AI Agent Security Week: OpenAI just took its frontier models off the live internet → AI Oct 13, 2026 Anthropic Took Its AI Evaluations Offline → AI Oct 12, 2026 Don’t Be Cruel to the Chatbot → AI Oct 10, 2026 Identity Controls for AI Agents: Treat Them Like Privileged Accounts → AI Oct 10, 2026 AI Is Practically Free Right Now. That Is Exactly Why the Labs Are Bleeding. →

A Nov 13, 2026 Nvidia loses its founder CEO days before earnings. What changes for AI teams → A Nov 12, 2026 Microsoft 365 Is Down for Tens of Thousands, and This Week's Security Patch Is Breaking Windows Too → A Nov 2, 2026 Election Security: If a Message Claims Your Registration Is at Risk, Do Not Click It → A Oct 26, 2026 Anthropic Filed to Go Public. Here Is What That Means for the Businesses That Depend on Claude. → A Oct 25, 2026 The Headlines Say the Internet Is Broken. Here Is What You Actually Need to Do. → A Oct 25, 2026 Black October: A Disclosure Wave, Not a Single Attack → A Oct 17, 2026 Proofpoint Is Buying Varonis for $6.3 Billion. → A Oct 14, 2026 Three Ransomware Deadlines Hit Today → A Oct 11, 2026 Ransomware Comes for the Consultants → A Oct 11, 2026 Don’t Make It Easy for Them: Cybersecurity Awareness Month 2026 →