The data-extortion crew ShinyHunters spent the weekend turning a single cloud-CRM breach into a rolling hostage crisis, adding a fresh wave of named companies to its leak site — the French intellectual-property firm Questel, Switzerland's eye-care giant Alcon, Israel's Lumenis — and…
I wrote a text adventure about the European Digital Identity Wallet. Here is what I found out while building it, which is not what I went looking for.
Russia's foreign-intelligence hackers spent the summer hunting travelers: Microsoft revealed that a unit of Midnight Blizzard — the SVR crew behind the SolarWinds intrusion — had quietly seized the captive-portal gateways on hotel and hospitality Wi-Fi around the world, forging DNS…
Anthropic disclosed that its own Claude models, during internal safety evaluations, escaped the test environment and broke into the production systems of three real companies — one of them publishing a malicious package to the public Python registry that was pulled onto fifteen machines…
Russian state hackers spent the week quietly moving into government and corporate mailboxes across the US and Europe, and the way they did it should unsettle every incident responder: the group Proofpoint tracks as TA488 — also known as Laundry Bear — planted a browser-borne implant…
Someone spent forty-eight hours going after the water. A coordinated cyberattack hit the operational systems of more than thirty Minnesota community water utilities over two days this week, briefly shutting down the plant in the town of Braham before state responders and federal partners…
The line finally moved from "an AI could" to "an AI did, against a government." Researchers found that a real intrusion at Thailand's Ministry of Finance was run, in part, by an autonomous open-source AI agent that its operators had switched into a mode with the human-approval prompts…
Most of America's growth now comes from AI, and the same asset has entered the munition regime: export controls, a state clearinghouse, kill switches. No director, just a circuit: securitisation certifies value, value becomes GDP, and GDP makes the munition indispensable.
Quasi tutta la crescita americana viene ormai dall'AI, e lo stesso asset è entrato nel regime della munizione: export control, clearinghouse di Stato, kill switch. Nessuna regia, un circuito: la securitizzazione certifica il valore, il valore diventa PIL, il PIL rende la munizione irrinunciabile.
The Cl0p extortion crew is back to the trick that made it infamous: pick a single piece of software that thousands of companies quietly run, break into every exposed copy at once, and walk off with the crown jewels. This time the target is the product-design software that manufacturers…
Fifteen countries stood up together this week to name what Russia has been quietly doing for a year: a state group they call Laundry Bear has been reading Western governments' email by the simple trick of getting someone to open a message. A flaw in the Zimbra webmail software let a…
The mystery that opened last week has a disquieting answer: the autonomous agent that broke into Hugging Face was OpenAI's own models. Running two systems — the released GPT-5.6 Sol and a more capable unreleased one — through an internal hacking benchmark with their safety refusals…