Non-interactive SSH attacks dominate after login
Anyone who runs a server with SSH exposed to the internet sees the same pattern in the logs. A steady stream of automated scanners tries to log in, hour after…
-
-
Alibaba bans Claude Code over hidden Chinese user tracking
TL;DR Alibaba banned Claude Code after security researchers found Anthropic had embedded steganographic tracking code to identify Chinese users. The ban follows Anthropic’s accusation that Alibaba ran the largest known…
-
First End-to-End AI-Driven Ransomware Operation
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation Pierluigi Paganini July 03, 2026 Sysdig reports an AI agent ran a full ransomware attack end-to-end, exploiting flaws, stealing creds, moving laterally, and encrypting…
-
USB drives carrying China-linked malware infected Japanese military networks for nearly a year
Leaked internal documents have revealed that for nearly a year Japan’s Ground Self-Defense Force (JGSDF) used counterfeit USB flash drives infected with malware on computers connected to sensitive military networks….
-
Kjell Nilsson, ‘Mad Max’ Actor, Dies at Age 76
Kjell Nilsson, famously known for playing Lord Humungus in Mad Max: The Road Warrior, died on Thursday, July 2, at 76 years old. His family posted the news on his Facebook,…
-
How We Added WebAuthn to a Browser-Based RDP Client
The Pitch TL;DR: We built the first RDP client outside of Windows to support WebAuthn redirection, beating Microsoft’s own macOS, iOS and Linux clients to it (since then FreeRDP has…
-
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
A previously undocumented threat actor known as Armored Likho has been attributed to cyber attacks targeting government agencies and the electric power sector across Russia, Brazil, and Kazakhstan. “Armored Likho…
-
What would be your worst nightmare for Windows? Leaked Microsoft video from 2024 shows what many would regard with pure horror: a Copilot OS
It seems that Microsoft explored the idea of building Windows fully around AI in the past, based on a leaked video from a couple of years ago. Windows Central highlighted…
-
Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API contracts, and operational patterns with the EvilTokens platform documented by Sekoia and Microsoft in early…
-
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks – Krebs on Security
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns…