This AI worm just rewrote its own rules • Graham Cluley
GRAHAM CLULEY Hang on a minute, James. You’re suggesting that Instagram ever had human support stuff? JAMES BALL So it […]
cybersecurity
Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
î „Ravie Lakshmananî ‚Jul 13, 2026Endpoint Security / Cybercrime Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable
From external espionage to domestic targeting
Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted
AI-generated code has made security debt a governance problem
AI-generated code is part of everyday software development. Developers use it to prototype, refactor, troubleshoot, and move from idea to
Ransomware negotiator who betrayed clients sentenced to 70 months in prison
A former ransomware negotiator at incident response firm DigitalMint has been sentenced to 70 months in prison after admitting he
World Cup blunder leaks Lionel Messi’s passport details
According to media reports, a security blunder carelessly leaked the passport details of every player in Argentina’s World Cup squad
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
î „Ravie Lakshmananî ‚Jul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security
A phishing attack that doesn’t steal your password
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login
Deepfake CSAM lawsuit against xAI, Grok expands
Two new parties have been added to a class-action lawsuit against X.ai over its Grok tool including teenagers and children