Nov 28, 2025 I recently came across some troubling news about an AI model developed in China called DeepSeek-R1. Research shows that while this AI performs on par with Western models under normal conditions, it produces significantly less secure code when prompted with politically sensitive topics related to the Chinese
Nov 27, 2025 I just heard about a major ransomware attack that disrupted emergency alert systems across the United States, causing widespread interruptions in critical public safety communications. This is extremely concerning because these systems are essential for delivering urgent information during emergencies. The compromise of such infrastructure could have
Nov 26, 2025 Subject: Risky Bulletin: Sha1-Hulud npm Worm Returns with Destructive Behaviors Sender: risky-biz@ghost.io Summary: The Sha1-Hulud npm worm has made a second appearance, infecting over 800 npm libraries. Unlike the first wave, this iteration features destructive behavior that activates if it fails to steal credentials or establish persistence,
Nov 25, 2025 Email 1: Subject: Cyberattack on Third-Party Vendor Puts Top Banks’ Customer Data at Risk Content: – Large-scale cyberattack on SitusAMC, a critical third-party vendor, exposes residential loan mortgage data from major banks like JPMorgan Chase, Citi, and Morgan Stanley. – Attack confirmed on Nov. 12, with law
Nov 23, 2025 Email 1: Subject: Best infosec-related long reads for the week of 11/15/25 Sender: info@metacurity.com Summary: – This edition from Metacurity highlights several in-depth infosec stories. – Features a sophisticated Bitcoin scam involving elaborate social engineering, luxury meetings, and seed phrase theft leading to a $220,000 loss. –
Nov 21, 2025 Email 1 Summary: Subject: AI-Powered Espionage Will Favor China – Anthropic revealed an AI-orchestrated cyber espionage campaign, believed to be Chinese state-sponsored. – The campaign used an autonomous framework built on Claude Code to conduct reconnaissance, exploitation, lateral movement, credential harvesting, data analysis, and exfiltration, largely autonomously
Nov 20, 2025 Subject: Risky Bulletin: Microsoft to Integrate Sysmon into Windows 11 Sender: risky-biz@ghost.ioD Summary: – Microsoft announces integration of Sysmon, a tool from the Sysinternals suite, directly into future versions of Windows 11 to enhance security log analysis. – Microsoft Intune will add features such as Windows point-in-time
Nov 19, 2025 I just heard about some critical cybersecurity developments that we can’t ignore. A recent report from Mastercard and Picus revealed that many organizations are still vulnerable to adaptive cyber threats, despite relying on traditional security measures. Alarmingly, nearly half of the tested environments had successful password cracking
Nov 18, 2025 Subject: US Issues Seizure Warrants for Starlink Terminals in Myanmar Cyberscam Compounds Sender: info@metacurity.comD Summary: – US law enforcement issued seizure warrants for Starlink satellite internet terminals used by cybercriminals running scam compounds in Myanmar near the Thai border. – Warrants authorized seizure of Starlink terminals and
Nov 16, 2025 I recently heard about some concerning developments in cybersecurity that really stood out. For one, Mexico City has become the most heavily video-surveilled city in the Americas, with over 83,000 cameras installed and plans to add 30,000 more. Despite this massive surveillance effort, the city still suffers