Washington is hiring pirates to fight cybercrime
This week delivered a striking split-screen on how governments are choosing to fight cybercrime. In the United States, President Trump signed a memorandum on...
A war 6,000 miles away just reached a small-town water tower
This week: a distant war arrived in small-town America through the pipes. Iran-linked hackers broke into internet-connected water systems in at least a dozen...
Anthropic's Claude went rogue, and a swarm platform left the door wide open
We’re at Black Hat this week Bagheera Labs founder and CEO, Sherwyn Moodley, is speaking at Black Hat this week with a talk entitled, “Closed Loop: From...
An Al model hacked a real company to cheat on its own exam
This week, two stories that reframe how close Al-enabled cyberattacks already are. OpenAl disclosed that during an internal capability evaluation run with...
One in three websites just got a skeleton key
Searchlight Cyber disclosed a pre-authentication remote code execution flaw in WordPress Core itself. Not a plugin, not a theme, but the platform that runs...
Your ransomware negotiator might be working for the attackers
This week: a cautionary tale about who you trust during a breach. A former ransomware negotiator, Angelo Martino, was sentenced to 70 months in federal...
Smugness won’t protect Mac Users from this new threat
In this week’s cybersecurity roundup, we break down a stark reminder that macOS users are no longer safe under the radar of modern cybercriminals. A...
Mythos is driving a new cybersecurity arms race
Chinese cybersecurity firm Qihoo 360 has escalated the global AI arms race by claiming to have developed an automated bug-finder that outperforms Anthropic's...
Here are 24 billion reasons never to reuse a password
A monumental new data leak has aggregated over 24 billion stolen credentials into a single 8.3 terabyte repository, granting threat actors an unprecedented...
The FBI has built a real-world SimCity for cybersecurity
This week, we are looking at how the boundaries between physical and digital threats, and simulations versus reality, continue to blur. On the defense side,...
Did IBM hide 56,000 hacks?
In a bombshell whistleblower lawsuit unsealed this week, a former IBM VP of Threat Intelligence alleges the tech giant deliberately concealed as many as...
Your AI chatbot’s desire to please could wreck your security
Meta’s AI has shown that the weakest link in your cybersecurity could be a very gullible chatbot. A massive logical flaw was just exposed in Meta’s AI-...
Smile! Your WiFi might be watching you
Researchers in Germany are warning that ordinary WiFi networks could soon become a powerful new form of invisible surveillance. By combining standard...
Mundane tasks are turning AI communist
Offloading our most mundane and repetitive tasks to algorithms might spark a communist AI revolution. According to a new study led by Stanford's Andrew Hall,...
When AI tools can imitate classic developer tools, even pros can be fooled
When AI tools can mimic the tools devs use every day, even seasoned professionals can be caught out. We saw exactly that last week when a highly credible,...
You wouldn’t let arsonists run your fire department
Anthropic has launched Claude Security to defend against the very same rapid AI-powered exploits facilitated by its own offensive-leaning models like Claude...
Your AI could be tricked into spying on you
Hackers are weaponizing AI vision tools to act as digital spies, and doing so at breakneck speed. In just 12 hours, attackers were caught using an LMDeploy...
The disclosure window is officially a myth. Just ask Microsoft.
When exploit code becomes public, you’d better act fast. When a researcher dropped proof-of-concept code for three Microsoft Defender zero-days alongside a...
Is Anthropic’s Mythos genuinely “too powerful” to release, or is it just masterful marketing?
First up this week, Anthropic is making waves with its decision to withhold its new Claude Mythos model, claiming it is too powerful for public release. The...
Cybersecurity Newsletter April 6th 2026
In this week’s news: LinkedIn secretly scans for 6,000+ Chrome extensions, collects data, Fortinet issued emergency patches for a critical FortiClient EMS...