Subscribe
Sign in
Home
Notes
Chat
Sponsors
CyberHub Podcast
Goodbye Privacy
Archive
Newsletters
About
Latest
Top
Discussions
Palo Alto GlobalProtect VPN Auth Bypass Now Actively Exploited, Carnival Cruise Breach Exposes 6 Million Records, Microsoft Threatens Legal…
GlobalProtect 0-Day Under Active Attack, AI Infrastructure Exploits Go Public, and Russian Threat Actors Fully Embrace Generative AI
6 hrs ago
•
James Azar
17:21
May 2026
The Operator’s Dilemma – Part II
Why visibility, ownership, and operational alignment matter more than scanners, dashboards, and remediation SLAs
21 hrs ago
•
James Azar
5
This Week in Cybersecurity #54
Good Morning, Security Gang!
May 29
•
James Azar
12
1
Iranian MOIS Hackers Behind LA Metro Breach, CrowdStrike Google and Shadowserver Disrupt GlassWorm, FBI Warns of Silent Ransom Group…
Iran State Hackers Hit LA Metro, 700GB Stolen, Reached Rail Yard Controls, Silent Ransom Group Sending Physical Actors to Law Firms, Ghost Stadium…
May 28
•
James Azar
2
1
21:39
ShinyHunters Breach Charter Communications via Vishing, Iran's Nimbus Manticore Targets Aviation and Software Companies, Lithuania…
Charter 42M Records Breached, Knowledge Deliver LMS Zero-Day Deploying Cobalt Strike, SharePoint Ad-Band RCE, Two Iranian APT Campaigns, Lithuania 600K…
May 27
•
James Azar
19:09
Lazarus Deploys RemotePE Memory-Only RAT Against Banks and Crypto Firms Leaving Zero Disk Artifacts, Canadian Man Arrested for Operating…
Ubiquiti Three CVSS 10.0 UniFi Flaws with 100K Exposed Endpoints, FBI Kali365 Phishing Kit Bypasses M365 MFA, Lazarus RemotePE Fileless RAT, Russian…
May 26
•
James Azar
17:38
Megalodon Supply Chain Attack Infects 5500 GitHub Repos, Anthropic Mythos Detects 23K Vulnerabilities Across 1000 OSS, Netherlands Seizes…
Megalodon Backdoors 5,500 GitHub Repos in Six Hours, Mythos AI Finds 23,000 Vulnerabilities, and the Supreme Court Weighs America’s Digital Privacy…
May 25
•
James Azar
19:19
The Operator’s Dilemma — Part I Mythos Changed the Rules. Most Security Teams Haven’t Realized It Yet
Why the future of cybersecurity is no longer about finding vulnerabilities — but surviving the operational impact of discovering too many of them
May 25
•
James Azar
13
This Week in Cybersecurity #53
From SD-WAN zero-days and Exchange preview exploits to poisoned developer ecosystems and AI sandbox escapes, this week exposed one brutal reality: the…
May 24
•
James Azar
7
TeamPCP Hacks GitHub Exfiltrating 3800 Internal Repos, Fresh Mini Shai-Hulud Wave Hits 320+ npm Packages, Anthropic Silently Patches Claude…
☕ Good Morning Security Gang,
May 21
•
James Azar
21:20
CISA Exposed GovCloud Admin Keys and Plaintext Passwords on Public GitHub Repo, Microsoft Disrupts Fox Tempest Malware, Verizon DBIR 2026…
Verizon DBIR: Vulnerabilities Now #1 Breach Vector | CISA Contractor Leaks Own Cloud Keys | Fox Tempest Malware Signing Takedown | ChromaDB Unpatched…
May 20
•
James Azar
1
19:45
Critical Nginx Rift Vulnerability Exploited Three Days After Disclosure, 7-Eleven Confirms ShinyHunters Breach, Operation Ramz Arrests 201…
NGINX Rift Zero-Day Exploited in Wild | 7-Eleven Breach Confirmed | 4.8M Healthcare Records Added to HHS Tracker | OpenClaw AI Agent Sandbox Escape …
May 19
•
James Azar
2
1
19:12
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts