Dark patterns affect most sites offering subscriptions, Fin7 has roared back to life, NATO summit cyber and espionage risks run high, Microsoft flaw was exploited for 18 months, CSRF flaw affected NSA training platform, Health scams run rampant on Meta sites, Cybercrims looted S. Africa, much more
Gay furry hackers spill Heritage Foundation files, Blast-RADIUS attack enables widespread MITM attacks, Russia plans to up social media propaganda again to favor Trump, Microsoft plugs two actively exploited flaws in Patch Tuesday updates, Evolve Bank & Trust sends out breach notices, much more
Microsoft bans Android devices in China, New CloudSorcerer group abuses public cloud for Russian espionage, Avast releases decryptor for DoNex ransomware, Apple removes 25 VPN apps from Russian app store, Roblox conference attendees exposed in data breach, Scalpers fake Ticketmaster tix, much more
Operation Morpheus took down nearly 600 Cobalt Strike servers, Threat actors released 166K Taylor Swift Eras Tour ticket bar codes, Brain Cipher apologized to Indonesia, Threat actors ID'ed Authy phone numbers, Nearly 10 billion plaintext passwords compiled, Slew of state agencies hacked, much more
Last February, I switched Metacurity from Substack to Beehiiv because of Substack's willingness to give speakers with odious views a platform. Since then, I've heard from subscribers - ranging from tech companies to the US Department of Defense – that their organizations automatically filter out emails from
Data breach of Evolve Bank and Trust hits money transfer service Wise, CocoaPods flaws left macOS and iOS apps vulnerable to supply chain attacks for a decade, Zero day flaw affects popular Cisco devices, Top credit union Patelco suffered serious security incident, much more
New Brain Cipher ransomware was behind Indonesian government attack, Indonesia busted 100 foreign nationals suspected of cybercrime, A dozen-plus Texas state agencies and universities were hit by Midnight Blizzard attack, Skeleton Key bypasses AI guardrails, much more
An indicted hacker ran a major cybercrime operation after becoming a DOJ cooperating witness, Crypto scammers who engaged in a real-world violent crime spree, Detroit reforms its facial recognition system after string of false arrests, more
Microsoft reveals more customers hacked by Midnight Blizzard, Operation First Light busted 3,950 online scammers, More than half of top open source projects contain memory-unsafe code, BlackSuit launched ransomware attack on Elden Ring parent company, Indonesian government lacks backup, much more
Polyfill.io service claims it was defamed after researchers point to massive supply chain attack, US offers $5m reward for "crypto queen," much more
