Yes…it’s a new year – and I suck at posting to this blog b/c facebook has pwned me something awful. But hey…I just wanted to post so that you know I still exist. Here I am…
The Hackers New
- AI Changed the Exposure Problem. Validation Needs to Change With It.
- Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
- Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
- When the Whole Company Adopts AI: What It Does to Your SOC
- OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
- GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
- Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
- Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
- Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection