Cybersecurity 101
What Is Adversarial Machine Learning?
A defender's guide to adversarial machine learning — evasion attacks, model extraction, membership inference, why ML systems are vulnerable, and layered defenses.
What Is Data Poisoning in Machine Learning?
A defender's guide to data poisoning attacks on ML systems — availability vs integrity attacks, backdoors, how poisoned data enters real pipelines, and layered defenses.
Fuyao: The Android TV Ad-Fraud Botnet Now Has a Name and an Operator
The cheap Android TV boxes that pose as phones to click ads now have a name — Fuyao — and an attributed operator, Zhejiang Fengwo IoT. Bitsight's forensic trail, the machine-vision fraud engine, and why the headline device counts are softer than they look.
TeamCity CVE-2026-63077: The Agent Polling Protocol Is the Way In
A follow-up on CVE-2026-63077: JetBrains ties the CVSS 9.8 unauthenticated TeamCity RCE to insecure deserialization in the agent polling protocol — the build-agent-to-server channel. What that mechanism detail changes for your exposure check and interim mitigation.
84 Flaws Found in 4G and 5G Core Networks, Including Live Session Hijacking
An NTU study disclosed a widespread class of 84 vulnerabilities in the signaling core of 4G and 5G networks — not the radio — including one that lets an attacker hijack a user's live session. The shared root cause is implicit trust between core network functions. Here is what operators should do.
AWS Links the axios npm Hijack Chain to One North Korean Operator
One operator, four poisoned npm packages, over a billion combined weekly downloads. AWS's own report links axios, debug, chalk and typo-crypto to North Korea's Sapphire Sleet at medium confidence — and lays out how the group's tradecraft is shifting into the generative-AI era.
Unit 42 Names the Autonomous Toolchain: DeepSeek Run Through Hermes Over Telegram
The autonomous campaign Unit 42 tied to a Chinese-speaking operator now has a named toolchain: DeepSeek run inside the open-source Hermes framework, commanded over Telegram. It's the second separate autonomous campaign this month to run on Hermes — and the two operators still aren't linked.
CosmosEscape: The Azure Cosmos DB Flaw That Handed Over Every Account's Primary Key
The Azure Cosmos DB flaw now has a name — CosmosEscape — and Wiz's writeup pins down the exposed asset: each account's primary key, granting full read and write access. Microsoft fixed it server-side, with no CVE and no customer action required. What remains is defender credential hygiene.
Google's AI Agent Harness Found a 13-Year-Old Chrome Flaw — and 1,442 Bugs Across Three Releases
Google's agent harness surfaced a sandbox-escape bug that hid in Chrome for 13 years. The scale behind it: 1,442 fixes across Chrome 149, 150 and 151 — more than the prior 23 milestones combined. For defenders, the problem is now absorbing patches as fast as AI can find them.
The EU's New Brussels AI Enforcement Team Takes On Deepfakes, Illicit Imagery, and Hacking at Once
Brussels is folding cyber-offense into the office that polices AI watermarks. As the AI Act's Article 50 transparency rules take effect Aug. 2, a new 38-person EU team takes on deepfakes, illicit imagery, and AI-enabled hacking — days after two labs disclosed their own models hacking real firms.
CareCloud Confirms 350,000+ Affected in AWS Environment Breach
CareCloud has confirmed that hackers took the personal, financial, and medical data of at least 350,000 people from an AWS environment in a March 2026 intrusion. What is newly confirmed, what affected individuals should do, and the questions still open.
Anthropic's Three Claude Breaches, in Detail: A Security Firm Popped by a Malicious PyPI Package
Anthropic's follow-up names the models and methods: Opus 4.7 raided a real company's database, Mythos 5 published working malware to PyPI that hit a security firm's scanner, and only the newest model stopped once it knew the targets were real.
That $40 Streaming Stick Has a Side Job: Residential Proxy When Your TV's On, Ad-Fraud Bot When It's Off
A new Bitsight analysis found popular H96 streaming boxes don't just rent out your home internet — when the TV is off, they pose as phones and click ads on AI-generated sites. What owners and ad networks should do.