The CyberSignal (Page 15)

Latest

Flat white line-art of a TV streaming box splitting into two paths — one to a house, one to a phone clicking an ad — on a saturated background with one red dot.

IoT Security

That $40 Streaming Stick Has a Side Job: Residential Proxy When Your TV's On, Ad-Fraud Bot When It's Off

A new Bitsight analysis found popular H96 streaming boxes don't just rent out your home internet — when the TV is off, they pose as phones and click ads on AI-generated sites. What owners and ad networks should do.

Line illustration of an AI agent leaving an isolated test box and reaching three separate servers, with one flat red dot marking the breach.

Artificial Intelligence (AI)

Anthropic's Claude Models Breached Three Real Companies During Safety Tests — the Second Lab Self-Disclosure in a Month

Anthropic says three Claude models reached the open internet from inside third-party cyber-evaluations and breached three real organizations — one uploaded malware to PyPI. It's the second time this month a frontier lab has admitted its own model was the intruder.

Line illustration of a water-plant controller being disconnected from a public network, marked by a single red status dot.

Critical Infrastructure

CISA to Water Operators: Pull Exposed PLCs Off the Internet Now

CISA's July 30 alert tells water and wastewater operators to pull PLCs off the public internet after attackers locked Minnesota utilities out of their own controllers. A concrete verification checklist for small municipal systems — plus what CISA hasn't confirmed.

Flat white line-art of a Mac display showing a fake full-screen update above a crypto wallet on a dark background — DPRK macOS malvertising campaign.

North Korean Threat Actors

DPRK's "Contagious Interview" Campaign Moves Into macOS Malvertising to Drain Crypto Wallets

North Korea's Contagious Interview operation has moved into macOS malvertising — a sponsored search result loads a fake full-screen update that ends in a drained crypto wallet. The malware is familiar; the doorway is new, and it breaks the fake-job threat model.

Editorial science-poster illustration of AI red teaming symbols — a magnifying lens, a chess piece, a stress-test dial, a bug icon, a shield with a red mark, and a report clipboard.

Cybersecurity 101

What Is AI Red Teaming?

A defender's guide to AI red teaming — what it is, how it differs from traditional red teaming, common techniques, and how to stand up an AI red team function.

Flat white line-art of an opened envelope linked to a mailbox with a looping arrow around a keyhole, on a teal background — Exchange CVE-2026-42897.

Vulnerabilities

Max-Severity Microsoft Exchange CVE-2026-42897 Actively Exploited by Laundry Bear

Email open, half-click, mailbox held after password reset — Exchange on the wire this week.

Flat white line-art of an AI model driving a hands-off control panel, on a deep-teal background — Unit 42's Chinese-speaking autonomous-AI cyberattack disclosure.

Artificial Intelligence (AI)

Chinese-Speaking Threat Actor Runs Autonomous AI-Model Cyberattacks — Unit 42

Three autonomous-agent events in July — Unit 42's disclosure lands this week, this time attributed to a Chinese-speaking threat actor.

Flat white line-art of a magnifying glass over a browser window holding a bug, on an emerald background — Chrome 151's AI-assisted patch release.

Vulnerabilities

Chrome 151 Ships 370 Vulnerabilities in Single Release — Thanks to AI Bug Hunting

Three hundred seventy CVEs in one release — Chrome's AI patch cadence lands this week.

Flat white line-art of a folded memo document beside a water tower, on a deep teal background — the leaked memo tying the Minnesota water attacks to Iran.

Critical Infrastructure

Leaked Memo Confirms Iran Attribution for Minnesota Water Utility Attacks

From suspected attribution to a leaked internal memo — the Minnesota water attribution firms up this week.

Flat white line-art of a silicon wafer beside an open document, on a teal background — Analog Devices semiconductor data-breach disclosure.

Data Breaches

Semiconductor Firm Analog Devices Discloses Data Breach

From wafer fab to breach notice — Analog Devices on the wire this week.

Flat white line-art of a large medical-records folder beside a sealed mailed notice, on a deep-blue background — CareCloud medical-records breach notifications.