Newsletter
A bad day for “it’s patched, we’re fine” thinking: a utility confirms a 7.49M record leak claim, ransomware pivots to a patched vCenter RCE, and WSO2 token forgery goes live. Also: Acronis plugin LPE already seeing exploitation.
Newsletter
Cisco says CVE-2026-76461 is actively exploited, and it is already in CISA KEV. Leak-site monitors logged 190 new ransomware victim posts last week, while a weird new “stolen LLM gateway pool” pattern shows agents reselling access at scale.
Newsletter
A third-party email vendor incident triggers 347K Trezor phishing blasts, Cisco FMC is getting rooted in the wild by multiple clusters, Citrix NetScaler auth bypass sits in KEV, and Totolink router PoCs drop today. Plus: LLM access resale and passkey-themed lures.
Newsletter
Revolut confirms it handed over passports and Bitcoin histories to a fake government request, GitLab’s CVSS 10 path traversal sees in-the-wild probes within a day, CISA flags two MikroTik RouterOS bugs as exploited, and an exploit kit jumps between spy crews.
Novo Nordisk lost 1.3TB to a token left in public JavaScript, a hospice pharmacy breach hits 800,000 patients, a Conti affiliate is off to prison, and two Windows zero-days are being exploited right now. Today's Secret CISO.
Newsletter
A zero-click worm hijacks WeChat before you answer, ShinyHunters hits 1 million Mathspace students, Anthropic catches AI running its own hacking campaigns, and a fake Claude app drains crypto wallets. Plus PaperCut's twice-broken patch and today's top CVEs.
Newsletter
A Russian-speaking crew's AI agents hit 11 orgs in 26 seconds, Air Canada gets hit by ransomware, Veradigm's patient SSNs face a Friday ransom deadline, and four spy groups quietly share the same Chrome-Windows exploit kit.
Newsletter
ShinyHunters claims Florida's DMV database, a mysterious 'white hat' drains $320M from Bitcoin's Liquid Network, Check Point exposes a ChatGPT flaw that leaks Gmail across accounts, and Patch Tuesday sets a new record with 973 CVEs.
Newsletter
A 220M-record traveler database exposed, BigBear's MFA-bypassing phishing kit hits 258 orgs, an unpatched Magento zero-day backdoors stores, and a perfect-10 N-able RCE gets actively exploited.
Daily newsletter for CISOs
153 million driver's licenses hit the dark web, Qilin dumps ATF case files, Magento's unpatched zero-day backdoors stores, and an AI agent breaches a network in under 10 hours.
McKesson faces a $55M extortion deadline, Wesco's CRM data hits the dark web, a CrowdStrike zero-day drops without warning, and attackers race to exploit Citrix NetScaler and SonicWall flaws.
McKesson's healthcare breach hits 284M records, Berlin refuses a Rhysida ransom, 153M driver's licenses surface tied to IDScan, and Google patches an actively exploited Chrome zero-day.
A Thomson Reuters court platform breach exposes sealed records in 11 states, Manchester Airports data leaks after a ransom refusal, OpenAI's Astra hits a critical cyber threshold, and a 10.0-severity Kestra flaw joins a wave of actively exploited CVEs.
McKesson's 284M-record vishing breach, Qilin's leak of ATF case files, GitSpawn's silent code execution in AI coding agents, and CISA's KEV additions for SonicWall, Kestra, and LiteLLM.
An 86GB airport data grab, Berlin's ransomware standoff, a 700-agent OpenAI swarm that hacked Hugging Face, and the CVEs attackers are racing to exploit right now.
McKesson's massive ShinyHunters extortion, an AI coding assistant hijacked for ransomware ops, three maximum-severity ServiceNow flaws, and the takedown of the TeamPCP supply-chain crew.
Manchester Airports' 86GB data leak, Berlin's pre-election ransomware standoff, a chained PaperCut RCE zero-day, and hidden backdoors in Chinese routers headline today's Secret CISO.
Welcome to today's edition of Secret CISO. ShinyHunters claims 284 million patient records from McKesson, the ATF declares a major cyber incident, ransomware hits the technology behind US water utilities, and trusted Chrome extensions turn into crypto-stealing malware.
Welcome to today's edition of Secret CISO, where we unravel the intricate web of cybersecurity challenges and innovations shaping our digital landscape. In this issue, we delve into a series of alarming breaches and groundbreaking advancements that underscore the relentless evolution of cyber threats and defenses. First, we
Welcome to today's edition of Secret CISO, where we unravel the tangled web of cybersecurity threats impacting our digital world. As we dive into today's stories, a common thread emerges: the relentless pursuit of data by cybercriminals, leaving no sector untouched. First, we explore the Canvas
Welcome to today's edition of Secret CISO, where we unravel a tapestry of cybersecurity incidents that echo across industries and borders. From financial institutions to global entertainment giants, the digital realm is under siege, and today's stories reveal the vulnerabilities that lie beneath the surface. Union
