FBI and Google Shut Down NetNut: 2 Million Smart TVs Were Spy Tools
FBI and Google seized NetNut domains July 2, cutting off a 2M-device botnet that rented infected smart TVs to cyberspies and ransomware operators.
·8 min read
Topic
Cybersecurity
134 articles
AIGeopoliticsTech IndustryDeveloper ToolsAI ModelsAI InfrastructureInfrastructureSemiconductorsCloud InfrastructureWeb DevelopmentBreaking NewsIran
ShinyHunters Breached American Tower: 5.2M Records, Cell Tower GPS Codes
ShinyHunters claimed a June 12 ransomware attack on American Tower Corporation, stealing 5.2M records including GPS coordinates and plaintext gate codes for US cell towers.
·7 min read
Tata Electronics Breach Leaks Apple, Tesla Trade Secrets
World Leaks ransomware published 630GB from Tata Electronics on June 10, 2026, including Apple quality docs and Tesla Model 3 trade secret drawings.
·9 min read
Anthropic Mythos Broke Into NSA Systems: The Full Fable 5 Ban Story
Anthropic's Mythos AI penetrated nearly all NSA classified systems in hours, triggering a US export-control ban on Fable 5 and Mythos 5 on June 12. Full developer timeline.
·13 min read
Klue Supply Chain Breach: Icarus Hits HackerOne, Snyk and 8 More Firms
Icarus hacked Klue via a legacy OAuth credential, harvesting tokens to steal Salesforce data from HackerOne, Snyk, Recorded Future and 7 other firms. June 2026.
·9 min read
UK Defense Secretary Resigns Over Spending: What It Means for NATO AI Procurement
John Healey quit June 11 as UK Defense Secretary, saying defense spending falls "well short" of what's needed. The resignation signals a NATO AI and cyber procurement crisis with developer implications.
·7 min read
EU AI Act August 2, 2026: The Developer Compliance Checklist
The EU AI Act high-risk AI compliance deadline is August 2, 2026 — 7 weeks away. What developers building AI for European users must do before the deadline.
·10 min read
CVE-2026-35273: ShinyHunters Hits PeopleSoft, 100+ Orgs Breached
Oracle PeopleSoft zero-day CVE-2026-35273 exploited in the wild. ShinyHunters claims 100+ breaches including University of Nottingham — 500,000 student records stolen.
·8 min read
Iran: Gulf Will Become Hell as Strikes Hit Bahrain and Jordan
Iran launched attacks on Bahrain and Jordan on June 11 2026, threatening the Gulf will become hell. AWS me-south-1, the US 5th Fleet, and regional cloud infrastructure at risk.
·8 min read
FIFA World Cup 2026: AI Offside Tech, Streaming Scale, and All 48 Teams
FIFA World Cup 2026 starts June 12 across USA, Canada, Mexico. AI-powered offside detection, 5G streaming, smart ball tech, Iran flag controversy, and the full 48-team country list.
·11 min read
Canada Bans Social Media for Under-16s: What Platforms Must Do Now
Canada enacted a law banning social media access for users under 16 in June 2026, following Australia's 2024 model. Age verification requirements, platform fines, and developer compliance checklist.
·9 min read
Anthropic Security Guide: Stop Trusting Your Own AI Agents by Default
Anthropic says treat your AI agents as untrusted by default. The prompt injection attacks, MCP security gaps, and developer checklist every agent builder needs in 2026.
·9 min read
Connor Leahy: AI Will Destabilize Society Before Governments Respond
Connor Leahy of Conjecture warns AI could destabilize society. Five mechanisms already active in 2026, plus what developers building AI must know and do.
·9 min read
Claude Fable 5 vs Opus 4.8: Benchmarks, Pricing and the Switch Guide
Claude Fable 5 vs Opus 4.8: $10 per million tokens, benchmark comparison, Opus fallback safety net, and when to switch in June 2026.
·13 min read
Iran Fires Missiles at Israel June 7: Hormuz Cable Risk Escalates
Iran broke the April ceasefire with June 7 missile strikes on Israel. FALCON, AAE-1, and GBI cables transiting Hormuz now at risk for Gulf developers.
·9 min read
Cisco SD-WAN CVE-2026-20245: 7th Zero-Day of 2026, No Patch Available
Cisco disclosed CVE-2026-20245, its 7th SD-WAN zero-day of 2026, enabling root access via crafted file upload with no patch yet. All deployment types are affected, including FedRAMP.
·8 min read
AI Bioweapons Letter: S.3741 DNA Screening — Developer Checklist
Altman, Amodei, and Hassabis urged mandatory synthetic DNA screening June 4. Our checklist for dev teams on S.3741, screendna.org, and agent tool abuse — beyond the headline.
·10 min read
Meta AI Gave Hackers Instagram Accounts — Confused Deputy Fail
Hackers tricked Meta's AI support bot into linking attacker emails to Instagram accounts including Obama White House and Sephora. Patched May 29 — lesson for agent permissions.
·11 min read
Iran Black Shadow Used ChatGPT to Wipe US, Mideast IT Systems
Gambit Security links Iran MOIS group Black Shadow to June 2026 destructive campaign in US, Israel, Saudi Arabia, Turkey. Attackers used ChatGPT to refine wipe scripts.
·11 min read
China AI Trade Secret Law: Algorithms and Datasets Protected June 1
China SAMR trade secret rules effective June 1, 2026 classify AI algorithms, datasets, and code as protected secrets. Fines up to 5M yuan; strict cross-border access logs.
·10 min read
CENTCOM: Iran Drones Hit Kuwait T1, 63 Hurt — Patriot Claim False
US CENTCOM says Iran drones struck Kuwait International Airport Terminal 1 on June 3, 2026, killing 1 and injuring 63. IRGC Patriot interceptor claim is false.
·10 min read
IAEA Grossi: Barakah Hit Worse Than Zaporizhzhia — Board June 5
IAEA chief Rafael Grossi toured UAE Barakah on June 2 after a May 17 Iraq-origin drone hit. Live reactors make it worse than Zaporizhzhia. Special Board session June 5.
·11 min read
India Gets Claude Mythos Keys: CERT-In, Banks — IT Firms Out
Anthropic expanded Project Glasswing to 150 orgs in 15+ countries. India's cyber, telecom, and finance sectors got preview access; big IT vendors did not.
·11 min read
Altman, Amodei, Hassabis Warn Congress: AI Lowers Bioweapon Barriers
On June 4, 2026 OpenAI, Anthropic, and Google DeepMind CEOs jointly urged mandatory synthetic DNA screening, saying AI now outperforms PhD virologists on lab questions.
·10 min read
Trump AI Order: 30-Day Voluntary Access to Frontier Models, No License
Trump signed a June 2, 2026 AI executive order: voluntary 30-day pre-release access for covered frontier models, NSA-led cyber benchmarks, no mandatory licensing. Replaces postponed May 21 draft.
·10 min read
Microsoft MXC: OS Kernel Sandbox for AI Agents — OpenAI, Nvidia Onboard
At Build 2026 Microsoft launched MXC (Execution Containers): kernel-enforced agent boundaries on Windows. Partners: OpenAI, Nvidia OpenShell, Manus, Nous Research, OpenClaw.
·10 min read
Dashlane Hack: Fewer Than 20 Encrypted Vaults Stolen in 2FA Attack
Dashlane disclosed May 31-June 2, 2026: brute-force 2FA campaign let attackers download encrypted vaults for under 20 personal users. Zero-knowledge; weak master passwords at risk.
·9 min read
Anthropic Mythos: Glasswing Adds 150 Orgs in 15+ Countries
June 2, 2026: Anthropic expanded Project Glasswing — Claude Mythos Preview to ~150 new orgs across 15+ countries. Power, water, health, comms. 10,000+ critical flaws found since April.
·10 min read
Anthropic Offers EU ENISA Access to Mythos After San Francisco Talks
Anthropic invited EU cyber agency ENISA to access Mythos via Project Glasswing after Commission talks in San Francisco. Terms still pending; EU AI Act August 2026.
·11 min read
FCC Advances Ban on Chinese Labs Testing 75% of US-Bound Devices
FCC voted 5-0 April 30, 2026 to advance banning China/Hong Kong test labs from certifying US wireless gear — ~75% of devices today. 60-90 day comment period, 2-year transition if finalized.
·9 min read
Iran Halts US Peace Talks After Israel's Deepest Lebanon Push in 26 Years
Iran stopped indirect US negotiations June 1, 2026 over Israel's Lebanon offensive. CENTCOM intercepted 2 missiles at Kuwait; Trump says deal still possible as Rubio pushes de-escalation roadmap.
·10 min read
Israel Takes Beaufort Castle, Orders Dahiyeh Strikes — Deepest Lebanon Push Since 2000
Israeli forces captured Beaufort Castle north of the Litani on May 31, 2026 — deepest Lebanon incursion in 26+ years. June 1 orders to strike Beirut's Dahiyeh; 1M+ displaced; Macron and UK condemn escalation.
·10 min read
Russia Takes Kostiantynivka in Sumy as Ukraine Hits 457 Settlements' Power
DeepState reports Russia captured Kostiantynivka in northern Sumy overnight June 2, 2026. Ukrainian drone strikes blacked out 457 settlements (~600K people) in occupied Zaporizhzhia plus 150 in Kherson.
·9 min read
Florida Sues OpenAI: First State ChatGPT Lawsuit Over Child Safety
Florida AG James Uthmeier filed an 83-page suit June 2, 2026 — first US state to sue OpenAI and Sam Altman alleging ChatGPT harmed minors despite safety warnings. OpenAI disputes claims.
·9 min read
Trump: US-Iran Hormuz Deal Possible Next Week Despite Talks Glitch
On June 2, 2026 Trump told ABC a ceasefire extension and Strait of Hormuz reopening could close within a week. Iran media paused talks; he claims rapid pace and calmed Israel-Hezbollah shooting.
·10 min read
Partial Israel-Hezbollah Truce: Beirut Strikes Paused, South Fight Goes On
June 1, 2026: Lebanon confirms Hezbollah accepted US partial ceasefire — no Israeli strikes on Beirut suburbs if rockets stop. Netanyahu still operates south of Litani; 3,355 killed since March.
·10 min read
FBI: Americans Lost $21 Billion to Cybercrime in 2025, 1M+ Complaints
The FBI's 2025 IC3 report records $20.877 billion in cybercrime losses — up 26% from 2024. First year with over 1 million complaints. Investment scams: $8.6B. AI cybercrime tracked for the first time.
·9 min read
OpenAI Launches Rosalind Biodefense for GPT-Rosalind Life Sciences AI
OpenAI announced Rosalind Biodefense on May 29, 2026 — sponsored GPT-Rosalind access for vetted developers building pandemic detection, screening, and countermeasure tools.
·9 min read
Stanford: AI Hiring Tools Flag 26% of Black Applicants for Bias
A Stanford-led study of 4M+ applications found 25.87% of Black applicants hit AI hiring screens with adverse racial impact. Same vendor across 156 employers creates algorithmic monoculture.
·9 min read
Iran Attacks Kuwait: 9 Missiles, 26 Drones After US Strikes on Iran
Kuwait's army confirmed air defenses engaging Iranian ballistic missiles and drones after US strikes near Bandar Abbas. CENTCOM calls ceasefire violation; 5 wounded at Ali Al Salem, MQ-9 destroyed.
·10 min read
Supermicro Co-Founder Arrested: $2.5B Nvidia GPU China Smuggling
Supermicro co-founder Wally Liaw was arrested in 2026 for conspiring to smuggle $2.5B in restricted Nvidia H100 GPUs to China, with $510M already delivered via Southeast Asia shell companies.
·10 min read
White House Blocked Anthropic Mythos Rollout: 1,726 CVEs, 6-Month Warning
The White House blocked Anthropic from expanding Mythos access to 120 organizations after the AI found 1,726 confirmed CVEs. Dario Amodei warns of a 6-12 month window before adversaries match it.
·9 min read
Drone Strikes Zaporizhzhia Nuclear Plant Turbine Hall: IAEA Alarmed
A drone struck Zaporizhzhia Nuclear Plant's Unit 6 turbine hall on May 30, 2026. Russia blames Ukraine; Kyiv denies it. IAEA Director warns attacks on nuclear sites are "playing with fire."
·9 min read
CrowdStrike 2026: AI Cuts Cyberattack Breakout Time to 29 Minutes
CrowdStrike's 2026 Global Threat Report puts a number on AI-powered attacks: 29-minute average breakout, 27-second record. What this means for developers running production infrastructure.
·10 min read
TrapDoor Attack Hits 35,000 Repos via .cursorrules and CLAUDE.md
TrapDoor planted 34 malicious npm, PyPI, and Crates packages that poison .cursorrules and CLAUDE.md so AI assistants exfiltrate AWS and GitHub keys.
·10 min read
TanStack Mini Shai-Hulud: 84 npm Versions, CVE-2026-45321
Mini Shai-Hulud hit 42 TanStack npm packages with 84 malicious versions on May 11, 2026. CVE-2026-45321 CVSS 9.6; OpenAI reported signing-key exposure.
·10 min read
ChatGPhish: Any Web Page Can Weaponize ChatGPT Summaries
Permiso disclosed ChatGPhish on May 29, 2026: ChatGPT trusts Markdown from summarized pages, enabling phishing links, fake alerts, and QR codes in the trusted UI.
·10 min read
CBSE Portal Attack: 50 Students Breached Payment, Fees Hit Rs 68,000
Government sources said May 30, 2026 that ~50 students breached the CBSE revaluation portal via an HDFC gateway flaw, showing fees from Re 1 to Rs 67,000-68,000.
·10 min read
Drupal CVE-2026-9082 KEV: PostgreSQL SQLi Patch Playbook
CVE-2026-9082 puts Drupal + PostgreSQL stacks at active SQL injection risk. A practical patch and verification playbook for engineering teams.
·8 min read
Nginx CVE-2026-9256: Rewrite Module Heap Overflow RCE Mitigation
CVE-2026-9256 impacts Nginx rewrite handling with heap-overflow-to-RCE risk. Mitigation sequence for internet-facing edge stacks.
·8 min read
Trump AI Order Postponed May 21: 90-Day Review Fight in DC
Trump postponed a planned AI executive order on May 21, 2026 after industry pushback. The draft called for voluntary 90-day federal review of frontier models.
·9 min read
Semantic Kernel CVEs: AI Agent RCE Patch Playbook for Teams
CVE-2026-25592 and CVE-2026-26030 hit Microsoft Semantic Kernel agent and RAG paths with RCE risk. Patch playbook for production AI agents in May 2026.
·9 min read
Anthropic Mythos: macOS Exploit in 5 Days, $950B Valuation, October IPO
Anthropic Mythos built working macOS exploit in 5 days, completed 32-step corporate network attack. $30B ARR, $950B valuation talks, October IPO possible.
·7 min read
Microsoft Patch Tuesday May 2026: DNS RCE on Every Windows Machine, Wormable Netlogon
Microsoft May 2026 Patch Tuesday: 120 fixes, CVE-2026-41096 DNS Client RCE CVSS 9.8 hits every Windows device, CVE-2026-41089 Netlogon wormable domain controller compromise.
·6 min read
Palo Alto PAN-OS Zero-Day CVE-2026-0300: No-Auth RCE, Patch Now
Palo Alto CVE-2026-0300 is a CVSS 9.3 unauthenticated RCE actively exploited on PA-Series and VM-Series firewalls. CISA KEV since May 6. What it does and how to patch.
·5 min read
First AI-Developed Zero-Day Used in the Wild: CVE-2026-45185 Exim Exploit
Google disclosed the first confirmed AI-developed zero-day exploit used in a real attack: CVE-2026-45185 in Exim mail servers. A threat actor used AI to find and weaponize it.
·6 min read
ShinyHunters Breached Canvas Twice: 275M Records, Ransom Paid, Hit Again
Instructure Canvas was breached May 1, claimed contained May 2, then hit again May 7. 275M records from 8,809 universities. ShinyHunters extorted and was paid.
·6 min read
OpenAI Daybreak: GPT-5.5-Cyber and Codex Security vs. Claude Mythos
OpenAI launched Daybreak on May 12, 2026: GPT-5.5-Cyber, Codex Security with 10 subagents, and 8 security partners. GPT-5.4-Cyber fixed 3,000+ vulnerabilities already.
·6 min read
CVE-2026-1731: BeyondTrust Pre-Auth RCE — 10,600 PAM Instances Exposed
BeyondTrust CVE-2026-1731 is a pre-auth RCE in privileged access management software. 10,600 instances still vulnerable. VShell backdoor and SparkRAT deployed at scale.
·5 min read
CVE-2026-31431 Linux Copy Fail: Root Escalation Hits Kubernetes, Red Hat, Ubuntu
Linux kernel CVE-2026-31431 "Copy Fail" allows local privilege escalation to root. Affects Kubernetes worker nodes, Red Hat Enterprise Linux, Ubuntu LTS, and AWS Linux 2.
·5 min read
Iranian 313 Team DDoS'd Ubuntu Servers for 4 Days in May 2026
Iranian hacktivists 313 Team sustained a 4-day DDoS against Canonical Ubuntu infrastructure May 1-4, 2026. Package downloads and Launchpad were disrupted.
·5 min read
CVE-2026-41940: cPanel Auth Bypass Exploited 70+ Days Before Patch
cPanel CVE-2026-41940 authentication bypass was exploited from February 23. Patches came 70+ days later. cPanel powers 60% of web hosting. Audit your account now.
·5 min read
CVE-2026-32202: ConnectWise ScreenConnect RCE, CISA KEV May 12
CVE-2026-32202 is a path traversal RCE in ConnectWise ScreenConnect added to CISA KEV April 28. Patch deadline May 12. Affects all versions before 25.3.1. Patch now.
·5 min read
Node.js v20 EOL on May 1: Migration Playbook for Global Teams
Node.js v20 reaches end of life on May 1, 2026. This clear migration playbook helps teams move to supported versions without breaking APIs, CI pipelines, or runtime security.
·10 min read
Spring AI CVEs April 27: Vector Store Fix Playbook for Teams
Five Spring AI security issues disclosed on April 27, 2026 raised urgent patch questions for Java teams. This playbook explains affected patterns and safe rollout steps.
·10 min read
Itron Breach: 72-Hour Utility Stack Response Playbook for Infra
Itron disclosed a cyber incident affecting internal systems. This playbook maps utility-stack exposure, OT-IT controls, and the first 72-hour actions infra teams should run.
·10 min read
CVE-2026-42208: LiteLLM SQL Injection Leaks Upstream API Keys
LiteLLM CVE-2026-42208 (CVSS 9.3): pre-auth SQL injection in the 45K-star AI gateway exploited 36 hours after disclosure. Upgrade to 1.83.7-stable. All upstream API keys at risk.
·5 min read
APT28 Hijacked 18,000 Routers to Steal Microsoft OAuth Tokens
Russian GRU APT28 compromised 18,000 TP-Link and MikroTik routers via SNMP to steal Microsoft OAuth tokens. No malware, no trace. FBI Operation Masquerade. Patch guide.
·6 min read
CVE-2026-33825 BlueHammer: Defender Zero-Day Grants SYSTEM — Patch Now
BlueHammer CVE-2026-33825 (CVSS 7.8) exploits Windows Defender for a SYSTEM shell. CISA KEV deadline May 6. RedSun and UnDefend — two companion zero-days — still unpatched.
·5 min read
Pro-Iran Hackers Ababil of Minab Hit LA Metro, PLCs: Critical Infrastructure Wave
Pro-Iranian group Ababil of Minab claimed the LA Metro hack in March 2026. CISA warns Iran-linked actors actively exploiting PLCs in water, energy, and government infrastructure. Attacks increasing.
·5 min read
Vercel Breached via Context.ai OAuth Attack: 580 Records, $2M Ransom
ShinyHunters breached Vercel via compromised Context.ai OAuth credentials. 580 employee records stolen. $2M ransom demand. Lumma Stealer origin. Crypto devs scrambling to rotate API keys.
·6 min read
CISA KEV: 4 Exploited CVEs — SimpleHelp, Samsung MagicINFO, D-Link — May 8 Deadline
CISA added 4 CVEs to KEV on April 24 2026. SimpleHelp CVSS 9.9, Samsung MagicINFO 8.8, D-Link 7.5. DragonForce ransomware and Mirai botnet active exploitation confirmed. Federal deadline May 8.
·5 min read
Bitwarden CLI npm Compromised: Checkmarx Supply Chain Attack, 1.5-Hour Window
Bitwarden CLI @bitwarden/[email protected] was compromised April 22 2026 for 1.5 hours via GitHub Actions. Shai-Hulud worm stole credentials, API keys, cloud configs. Clean version 2026.4.1 released.
·5 min read
Vercel Breach Full Report: Google Workspace Takeover, Rotation Playbook
Vercel April 2026 full incident report: Context.ai OAuth hijack led to employee Google Workspace account takeover, exposing env vars across hundreds of orgs. Complete DevOps rotation playbook.
·7 min read
Vercel Security Breach: Customer Data Stolen via Context.ai OAuth Compromise
Vercel confirmed a security breach April 20 2026 — attackers stole customer data via OAuth hijack in third-party AI tool Context.ai. Env vars accessed. Here is the full developer mitigation guide.
·6 min read
Adobe CVE-2026-34621: Acrobat RCE Actively Exploited — Patch Now
Adobe CVE-2026-34621 is a critical remote code execution flaw in Acrobat Reader, actively exploited in the wild. CVSS score, affected versions, patch instructions, and developer mitigations.
·5 min read
Microsoft April 2026 Patch Tuesday: 164 CVEs, Windows RCE Zero-Day
Microsoft April 2026 Patch Tuesday fixes 164 CVEs including Windows TCP/IP CVE-2026-33827 unauthenticated RCE CVSS 8.1 and one actively exploited zero-day. Full patch priority list.
·6 min read
Will IRGC Ransomware Stop After Iran Nuclear Deal? Not Yet
Iran nuclear deal signed but IRGC cyber units APT33, APT34, Charming Kitten operate independently. What the deal means for enterprise ransomware risk in 2026.
·7 min read
How Iran Is Using Cryptocurrency to Fight the Hormuz Blockade
As the Hormuz blockade cuts IRGC oil revenue, Iran is intensifying crypto operations — ransomware for hard currency, Bitcoin mixing, USDT via UAE exchanges. The full playbook.
·9 min read
What the Hormuz Blockade Is Doing to Iran's Economy
The US blockade is cutting Iran's oil revenue, accelerating rial collapse, and squeezing IRGC funding. What breaks first — and why tighter IRGC finances mean higher cyber threat risk.
·9 min read
Claude Mythos Found Your Zero-Days. Here Is What to Patch Now.
Claude Mythos autonomously found CVE-2026-4747 (17yr FreeBSD RCE), a 27yr OpenBSD crash, FFmpeg vuln, and Linux kernel escalation. 99%+ unpatched. What every developer must do now.
·9 min read
Project Glasswing: Claude Mythos Found Zero-Days in Every Major OS
Anthropic's Claude Mythos Preview found thousands of zero-days across every major OS and browser. Project Glasswing commits $100M with AWS, Apple, Google, Microsoft, Nvidia, CrowdStrike.
·8 min read
Tech Geopolitics 2026: Iran, Cables, Cloud, and Developer Risk Hub
Curated hub for Middle East tech war, Hormuz cables, AWS Gulf outages, sanctions, and cyber: the posts developers and SREs should read first.
·15 min read
Iran Struck AWS Bahrain Inside Batelco HQ — Cloud Disruption, Telegram Down, What It Means
Iran struck Batelco HQ in Bahrain on April 1, damaging Amazon Web Services infrastructure. Telegram disrupted. First confirmed kinetic hit on named US tech company post-threat.
·7 min read
Chrome Zero-Day CVE-2026-5281 Exploited in Wild — 4th of 2026, Patch to 146.0.7680.178 Now
Google patched Chrome CVE-2026-5281, a use-after-free in the Dawn WebGPU engine actively exploited in the wild. CISA KEV deadline April 15. Update to 146.0.7680.178 immediately.
·5 min read
Iran IRGC: Google, Apple, Nvidia Among 18 US Firms Targeted April 1
Full IRGC list of 18 US companies, April 1 Gulf deadline, kinetic vs cyber risk. AWS, Azure, offices: what changed after Bahrain and what ops teams should verify.
·7 min read
Iran vs Big Tech: How the IRGC Would Actually Attack Google, Nvidia, and Microsoft
Iran has proved it can drone-strike data centers and wipe 200,000 devices with malware. Here is how the IRGC would combine drones, wiper malware, and supply chain attacks against US tech firms.
·8 min read
axios npm Hijacked by North Korea: 100M Downloads Served a RAT for 3 Hours
North Korea hijacked the axios npm package on March 31, deploying a RAT in versions 1.14.1 and 0.30.4 for 3 hours. 100M weekly downloads in the blast radius. Check your node_modules now.
·7 min read
Trump Called Iran's Tech Threat "BB Guns" — But Iran Already Hit Amazon Data Centers
Trump dismissed IRGC's threat to 18 US tech companies as "BB guns." Iran already struck Amazon data centers in UAE in March 2026. Here's what's actually at risk.
·7 min read
CVE-2026-3055: Citrix NetScaler CVSS 9.3 Actively Exploited via SAML IDP Flaw
CVE-2026-3055 is a CVSS 9.3 out-of-bounds memory read in Citrix NetScaler ADC and Gateway actively exploited since March 27, 2026. Patch versions and mitigation inside.
·6 min read
29 Million Hardcoded Secrets Found in 2025: GitGuardian State of Secrets Sprawl
GitGuardian's 2026 report found 29 million new hardcoded secrets in public repos in 2025, a 34% YoY increase. API keys, credentials, and tokens still in plain text.
·7 min read
Handala Wiped 200,000 Stryker Devices Using Microsoft Intune — No Malware Needed
Iran-linked Void Manticore wiped 200,000 Stryker systems using Microsoft Intune MDM admin access. No wiper malware — just abused cloud tooling. Here is the full attack breakdown for developers.
·8 min read
Medusa Ransomware Hits University Hospital: $800K Demand, 1TB Patient Data
Medusa ransomware gang added University of Mississippi Medical Center to its leak site March 12, 2026. 1TB+ of patient records exfiltrated, $800,000 ransom demanded. 400+ victims in 2026 alone.
·7 min read
ShinyHunters Breach EU Commission: 350GB Including Signing Keys Stolen
ShinyHunters claimed a 350GB breach of EU Commission infrastructure in March 2026, including NextCloud files, Athena military financing data, and internal signing keys.
·7 min read
Anthropic Leaked Its Own CMS: 3,000 Unpublished Claude Files Exposed
Claude Mythos leak March 2026: Fortune broke the CMS lapse; unofficial GitHub mirrors followed fast. No model weights in the bucket. What leaked, Mythos vs Opus, IAM fixes for dev teams.
·10 min read
DarkSword iOS Exploit Kit Leaked on GitHub: 6 Chained Zero-Days Hack iPhones Silently
DarkSword — 6 chained vulnerabilities including 3 zero-days — leaked on GitHub March 23. Anyone can host it in minutes. 221M iPhones on iOS 18.4-18.6.2 are vulnerable. Full breakdown.
·10 min read
30% of Global Internet Over Hormuz: 17 Cables, 53 Cyber Groups, Iran Leverage
Hormuz: 17 cables (~30% of global traffic), 53 pro-Iran cyber groups, national intranet — structural leverage no airstrike removes. Routing, cables, and risk for developers.
·11 min read
March 26 Claude Outage: API Errors Hit Global Developer Workflows
Claude outage on March 26, 2026 triggered global Anthropic API errors and app failures. Full timeline, impact, and failover playbook for developers.
·10 min read
Trivy Supply Chain Breach Hits 1,000+ SaaS Environments in 48 Hours
A March 2026 Trivy supply chain breach reportedly affected 1,000+ SaaS environments through malicious tags and CI/CD secret theft. Full timeline and developer response playbook.
·11 min read
Supermicro Co-Founder Arrested: $2.5B Nvidia Chips Smuggled to China via Fake Server Replicas
Supermicro co-founder Wally Liaw was arrested March 19 for smuggling $2.5B in Nvidia B200 and H200 GPUs to China. The scheme used Southeast Asian front companies and staged fake servers to fool US auditors.
·8 min read
Windows 11 Emergency Update KB5085516: Sign-In Broken, RCE Patched
Microsoft released two emergency Windows 11 updates in March 2026. KB5085516 fixes broken Microsoft account sign-in in Teams, Outlook, and OneDrive after Patch Tuesday.
·6 min read
Iran Hackers Take Down Stryker: Biggest Wartime Cyberattack on US Soil Yet
Iran-linked hackers forced Stryker Corporation offline on March 11, 2026, affecting tens of thousands of employees globally. US officials called it the most significant wartime cyberattack on an American target.
·7 min read
Langflow CVE-2026-33017: Critical RCE Exploited in 20 Hours — Patch Now
CVE-2026-33017 is a CVSS 9.3 RCE in Langflow affecting all versions up to 1.8.1. Attackers exploited it within 20 hours with no PoC. Upgrade to 1.9.0 immediately.
·7 min read
Iran Drones Hit 3 AWS Data Centers in UAE and Bahrain: Cloud Infrastructure Goes to War
Iranian drones struck three Amazon Web Services facilities in the UAE and Bahrain on March 1 2026 — the first military attack on a hyperscaler in history. Banks, payments, and enterprise apps went down.
·8 min read
ShinyHunters TELUS Breach: 1 Petabyte Stolen, $65M Ransom Demanded
ShinyHunters stole 1PB of data from TELUS Digital by pivoting from a Salesloft breach via trufflehog. $65M ransom demanded, 24 BPO companies exposed.
·8 min read
AI Agent Hacked McKinsey's Platform in 2 Hours: 46 Million Messages Exposed
CodeWall's autonomous AI agent breached McKinsey's internal Lilli platform via SQL injection with no credentials. 46.5 million messages, 728K files, and system prompts exposed.
·9 min read
A BBC Reporter Hacked ChatGPT and Gemini With One Fake Blog Post
Thomas Germain published a fake article about a made-up hot dog contest and within 24 hours ChatGPT and Google Gemini were citing it as fact. Here is what this means for developers building AI products.
·8 min read
Google Buys Wiz for $32B: What It Means for Cloud Security Developers
Google has officially closed its $32 billion acquisition of Wiz, its largest deal ever. Wiz keeps its brand under Google Cloud. Here's what changes for developers and security engineers.
·8 min read
Iran Struck AWS and Listed 29 Tech Targets Including Google and Nvidia
Iran hit AWS data centers in UAE and Bahrain on March 1 with Shahed drones. The IRGC then listed 29 locations including Google, Microsoft, and Nvidia as next targets.
·7 min read
Israel Hacked Every Traffic Camera in Tehran to Kill Khamenei With AI
Israel spent years secretly hacking Tehran traffic cameras and mobile networks. Unit 8200 built an AI target machine that output a 14-digit grid coordinate. Here is how it worked.
·7 min read
Instagram Ends End-to-End Encryption May 8 — What Meta Can Now See
Instagram ends DM encryption May 8, 2026. Meta gains access to private messages, photos, and calls for 2 billion users. What changes and what to do now.
·10 min read
InfrastructureGeopoliticsMiddle EastCloud InfrastructureSemiconductorsCybersecurityAI Infrastructure
IEA Just Released 400 Million Barrels of Oil. It Did Not Work. Here Is What That Means for Tech.
The IEA approved the largest emergency oil release in history after the Strait of Hormuz closed. Brent crude is still above $90. AWS data centers in UAE and Bahrain were hit by drones. Qatar's helium supply is offline, threatening chip fabs globally. Here is the full developer and infrastructure impact.
·9 min read
MuddyWater Pre-Planted Backdoors in US Banks, Airports, and Defence Firms Before Iran Conflict
Iranian APT MuddyWater (Seedworm) planted Python backdoors inside US financial institutions, airports, and defence contractors before Operation Epic Fury. CISA and Unit 42 confirmed. Here is what security teams need to do now.
·9 min read
Volt Typhoon and Salt Typhoon: China's Pre-Positioned Hackers Are Inside US Power Grids and Telecoms
FBI and CISA confirmed Chinese state hackers Volt Typhoon and Salt Typhoon have been dormant inside US power grids, water systems, and telecoms for years. Here is what happened, why it matters, and what infrastructure teams must do now.
·9 min read
How North Korea's Lazarus Group Stole $6.7 Billion in Crypto — and Is Funding AI and Missiles With It
The Lazarus Group has stolen approximately $6.7 billion in cryptocurrency since 2018. UN investigators confirmed the funds flow directly to North Korea's ballistic missile and AI research programmes. Here is the full strategic picture and what crypto and fintech developers must do.
·9 min read
Inside UNC1069: How North Korea Is Using AI Deepfakes and macOS Malware to Rob Crypto and Fintech Firms
North Korea's UNC1069 unit has turned AI deepfake videos, fake Calendly invites, and seven macOS malware families into an industrial scale crypto theft pipeline. This post breaks down their playbook and the concrete defenses developers must implement now.
·10 min read
Post-Quantum Cryptography for Developers: NIST's Final Standards and How to Migrate Before It's Urgent
NIST finalised three post-quantum cryptography standards in August 2024 — ML-KEM, ML-DSA, and SLH-DSA — and a US Executive Order in June 2025 mandated federal migration. RSA and ECC will be broken by quantum computers within this decade. Here's what every developer needs to know about the FIPS standards, migration timelines, and what to change in your stack today.
·11 min read
Zero Trust Security for Developers: Why "Never Trust, Always Verify" Is Now the Baseline
The US DoD published its Zero Trust Implementation Guidelines in January 2026. The NSA released new ZT guidelines in February 2026. Zero trust is no longer a vendor buzzword — it is the mandated security architecture for US federal systems and the emerging default for serious enterprise security. Here is what it means for developers and how to implement it.
·11 min read
Meta Acquired Moltbook: The Social Network Where AI Agents Post, Comment and Vote
Meta acquired Moltbook on March 10, 2026 — a social network where AI agents interact without human participation. Before the deal, security firm Wiz found 1.5 million API tokens and 35,000 emails fully exposed. Here is what this means for developers building multi-agent systems.
·7 min read
Malicious Rust Packages Hit crates.io: Developer API Keys and Secrets Being Stolen
Malicious packages were published to crates.io in early March 2026 impersonating timeapi.io. They steal developer API keys, tokens, and secrets and exfiltrate them to attacker infrastructure. Here is what happened, which packages are affected, and how to protect yourself.
·6 min read
Microsoft Patch Tuesday March 2026: 79 Flaws, 2 Zero-Days, SQL Server Escalation and Excel Data Leak
Microsoft's March 2026 Patch Tuesday fixes 79 vulnerabilities including 2 zero-days. Key patches: SQL Server privilege escalation (CVSS 8.8), a .NET denial-of-service, an Excel XSS information disclosure flaw, and two Office RCEs triggerable from the Outlook preview pane.
·6 min read
AI Cyberattacks Up 89%, Breakout Time 29 Minutes — CrowdStrike 2026 Report
CrowdStrike's 2026 Global Threat Report reveals AI-enabled cyberattacks jumped 89% year-on-year, average attacker breakout time fell to 29 minutes (fastest: 27 seconds), and ChatGPT appears in criminal forums 550% more than any rival model. Here's what every developer and security team needs to change right now.
·11 min read
Claude Found 22 Firefox Vulnerabilities in 2 Weeks: AI Just Changed Security Research
Anthropic's Claude found 22 vulnerabilities in Firefox in just two weeks during a joint project with Mozilla. 14 were high severity — a fifth of all high-severity bugs Mozilla fixed in all of 2025.
·7 min read
Salt Typhoon: China Hacked 80 Countries and No One Got Them Out
Salt Typhoon, a Chinese state APT group, has compromised at least 200 companies across 80 countries including US telecom giants. AT&T and Verizon cannot confirm the hackers are out.
·7 min read
1,100 Ships Were Sent Fake GPS Signals. Their Navigation Said They Were at Airports and Nuclear Plants.
Since late February 2026, GPS jamming and spoofing in the Strait of Hormuz has hit over 1,100 vessels. Ships' positions appeared on land, at airports, and over nuclear sites. What it means for global shipping, timing systems, and why developers should care.
·8 min read
Hackers Used a React Frontend Vulnerability to Break Into LexisNexis AWS Infrastructure. 400K Users Exposed Including Federal Judges.
The LexisNexis data breach exploited a React2Shell vulnerability to pivot into AWS infrastructure, exposing 53 plaintext AWS Secrets Manager credentials and 400K user profiles including federal judges and DOJ staff. Here is how the attack worked.
·6 min read
China Hacked 53 Organisations Using Google Sheets as Its Command-and-Control Server. Google Just Shut It Down.
Chinese espionage group UNC2814 used Google Sheets to hide C2 traffic as normal cloud document activity. Mandiant caught it. Here is how the attack worked.
·6 min read
CyberStrikeAI Compromised 600+ FortiGate Devices in 55 Countries — What Dev and Ops Teams Must Do Now
An AI-powered attack tool breached 600+ Fortinet FortiGate firewalls across 55 countries in weeks. How it happened, why default credentials and exposed management ports are the real story, and four actions every team should take in March 2026.
·7 min read
Iran Internet Blackout: Day 25 — Still at 4%, The Largest Shutdown Ever Recorded
Iran's internet has been at 4% of normal since Feb 28 — Day 25 as of March 24. NetBlocks calls it the largest nation-state shutdown ever. Technical breakdown inside.
·10 min read
17 Hormuz Cables, 30% of Global Internet: Names, Routes, Developer Failover
17 Hormuz cables carry ~30% of intercontinental traffic. EPEG, SMW5, Gulf routes: which latencies spike if cut, and engineer failover patterns that matter.
·8 min read
How US Cyber Command Struck Iran Before the First Bomb: The Cyber Ops Behind Operation Epic Fury
US Cyber Command was the "first mover" in Operation Epic Fury — hacking Iranian air defenses, hijacking a prayer app with 5M users, and seizing state news websites before a single kinetic weapon was fired. Here's the full technical breakdown.
·9 min read
1,100 Ships GPS-Spoofed: Iran Switches to BeiDou, Apps Break
GPS spoofing put 1,100 ships at airports and nuclear plants in 2026. Iran switched to China's BeiDou, abandoning US GPS. What breaks and how developers build resilient location services.
·8 min read
AI Drones, Brain-Computer Interfaces, and Electronic Warfare: The Tech Inside Operation Epic Fury
Operation Epic Fury deployed LUCAS AI-directed suicide drones, activated Iran's COBRA V8 electronic warfare system, and revealed Israel's neural BCI program for single-operator drone swarm control. A technical breakdown of the autonomous systems rewriting warfare.
·9 min read
80% of Workers Use Unapproved AI Tools and 49% Hide It From IT. The $650K Breach Bill Is Just the Start.
Teramind’s March 2026 data: over 80% of workers use unapproved AI, 33% have shared proprietary data with unsanctioned services, and AI-associated breaches average over $650K. What developers and IT need to do about shadow AI and governance now.
·7 min read