Weekly Update 505
24 May 2026 Well, that didn't last long! Recording this on Saturday morning my time, I observed ShinyHunters having gone...
didn’t
Android Alert: 50 Google Play Apps Linked to ‘NoVoice’ Malware Reached 2.3M Downloads
Image: Luis Andrés Villalón Vega/Unsplash Hackers didn’t sneak past Google Play’s defenses. They walked right through the front door. Downloaded...
Nearly 7M Email Addresses Exposed in Crunchyroll Third-Party Breach
Image: Jonathan Kemper/Unsplash Crunchyroll just got breached, and it didn’t start inside its systems. It came through a vendor. According...
What Boards Must Demand in the Age of AI-Automated Exploitation
“You knew, and you could have acted. Why didn’t you?” This is the question you do not want to be...
Understanding WS-Federation: A Modern Primer
Look, if you’re reading this in 2026, let’s drop the pretense. You didn’t choose WS-Federation for a shiny new...
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
Ravie LakshmananFeb 05, 2026Cybersecurity / Hacking News This week didn’t produce one big headline. It produced many small signals —...
AI Didnt Break Cybersecurity
AI Didnt Break Cybersecurity I keep hearing the same sentence lately, from boards, executives, and even seasoned security leaders: “AI...
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories
Ravie LakshmananJan 22, 2026Cybersecurity / Hacking News Most of this week's threats didn't rely on new tricks. They relied on...
