Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News A lot of this week’s trouble starts with something trusted doing exactly...
Windows 11 Hotpatching Explained: How Much Does It Really Reduce Reboots?
Windows updates and inconvenient restarts have been uneasy roommates for decades. Microsoft is now trying to make them see much...
ASPI at 25 – a quarter-century of analysis and influence
Twenty-five years ago, the world’s knowledge of al-Qaeda, Vladimir Putin, China’s military ambitions and cyber capabilities, and the advantages of...
China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?
Earlier this year, insurance executives gathered in a Times Square conference room to play out a scenario: a Chinese cyberattack...
Fed gov pays to access at least six AI suites
Key points A Senate estimates question from Senator Jane Hume has produced the first real census of AI subscriptions across...
Anthropic plans to change enterprise data retention policy
Key points Anthropic plans to give enterprise customers greater control over their data, shifting its data retention policy for the...
How a Texas student blew the whistle on a rogue AI hacking attempt
Key points A student who spotted a supply-chain hack on GitHub later learned he had been arguing with a rogue...
Aligning Cybersecurity with Business Goals
Last Updated: 22 June 2026 Aligning Cybersecurity with Business Goals Cybersecurity leaders often face the same frustrating question from boards...
Agentic AI Security in 2026: A 90-Day CISO Implementation Plan Beyond the Checklist
Published: 16 August 2026 Executive Summary Agentic AI security is now a leadership and engineering discipline: CISOs need a practical...
Non-Human Identity Sprawl: A CISO Guide to Service Accounts, API Keys, and AI Agents
Last Updated: 6 August 2026 Non-Human Identity Sprawl: A CISO Guide to Service Accounts Short answer: Your machine identities, service...
Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me.
Published: 10 August 2026 Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me The...
FreeBSD Released the Most Security Advisories in Project History in June 2026
On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this. In April, the project...
I Wrote a New Book for Corelight
TLDR: I wrote a new book for Corelight called NDR Essentials. It's free at that link. This is the 10th...
