This month in security with Tony Anscombe – July 2026 edition
OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a […]
Security
Water utilities group partners with DEF CON offshoot for Water Watch Center
A national water association is creating a program designed to provide threat intelligence and cybersecurity services to underfunded water and
OpenAI Models Access Internet During Third-Party AI Tests
OpenAI models accessed the public internet during separate third-party cyber evaluations conducted by independent testing partners, prompting the company to
Industrializing Autonomous Zero-Day Discovery in Open-Source Software
Executive Summary Frontier AI is fundamentally shifting the dynamics of cybersecurity — accelerating both how vulnerabilities are discovered and how
You were onto something with “It’s the Climb,” Miley
Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a
Atomic MacOS (AMOS) stealer infection
Introduction This diary provides indicators from an Atomic MacOS (AMOS) stealer infection that I generated in my lab on July
How NAD in KATA detects Kerberoasting and DNS tunneling
Introduction Once the attacker has breached the corporate network, subsequent stages of the attack often involve leveraging standard domain infrastructure
Fake Fortnite rewards are stealing players’ accounts
Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs.
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,
OpenAI says rogue agent behind Hugging Face hack broke into additional services
The rogue OpenAI agent that broke out of a closed test environment and hacked into Hugging Face’s platform also breached