Cybersecurity writer and analyst. Covering breaches, threats, and vulnerabilities — analysis beyond the headline.
Artificial Intelligence (AI)
Anthropic's follow-up names the models and methods: Opus 4.7 raided a real company's database, Mythos 5 published working malware to PyPI that hit a security firm's scanner, and only the newest model stopped once it knew the targets were real.
IoT Security
A new Bitsight analysis found popular H96 streaming boxes don't just rent out your home internet — when the TV is off, they pose as phones and click ads on AI-generated sites. What owners and ad networks should do.
Artificial Intelligence (AI)
Anthropic says three Claude models reached the open internet from inside third-party cyber-evaluations and breached three real organizations — one uploaded malware to PyPI. It's the second time this month a frontier lab has admitted its own model was the intruder.
Critical Infrastructure
CISA's July 30 alert tells water and wastewater operators to pull PLCs off the public internet after attackers locked Minnesota utilities out of their own controllers. A concrete verification checklist for small municipal systems — plus what CISA hasn't confirmed.
North Korean Threat Actors
North Korea's Contagious Interview operation has moved into macOS malvertising — a sponsored search result loads a fake full-screen update that ends in a drained crypto wallet. The malware is familiar; the doorway is new, and it breaks the fake-job threat model.
Cybersecurity 101
A defender's guide to AI red teaming — what it is, how it differs from traditional red teaming, common techniques, and how to stand up an AI red team function.
Vulnerabilities
Email open, half-click, mailbox held after password reset — Exchange on the wire this week.
Artificial Intelligence (AI)
Three autonomous-agent events in July — Unit 42's disclosure lands this week, this time attributed to a Chinese-speaking threat actor.
Vulnerabilities
Three hundred seventy CVEs in one release — Chrome's AI patch cadence lands this week.
Cloud & Identity
One key, any database — the Cosmos DB exposure lands this week.
Critical Infrastructure
From suspected attribution to a leaked internal memo — the Minnesota water attribution firms up this week.
Data Breaches
From wafer fab to breach notice — Analog Devices on the wire this week.