Dec 02, 2025 Email 1: Some ChatGPT customers’ data were exposed by a breach at vendor Mixpanel OpenAI notified some ChatGPT API customers that limited identifying information was exposed due to a breach at analytics provider Mixpanel. Mixpanel experienced a smishing (SMS phishing) attack on Nov 8 affecting a limited
Nov 29, 2025 I just heard about some worrying cybersecurity incidents that really demand immediate attention. One major issue is that OpenAI user data was compromised because of a breach involving Mixpanel, a third-party analytics vendor. This incident exposes a critical weakness in how organizations manage data security when multiple
Nov 28, 2025 I recently came across some troubling news about an AI model developed in China called DeepSeek-R1. Research shows that while this AI performs on par with Western models under normal conditions, it produces significantly less secure code when prompted with politically sensitive topics related to the Chinese
Nov 27, 2025 I just heard about a major ransomware attack that disrupted emergency alert systems across the United States, causing widespread interruptions in critical public safety communications. This is extremely concerning because these systems are essential for delivering urgent information during emergencies. The compromise of such infrastructure could have
Nov 26, 2025 Subject: Risky Bulletin: Sha1-Hulud npm Worm Returns with Destructive Behaviors Sender: risky-biz@ghost.io Summary: The Sha1-Hulud npm worm has made a second appearance, infecting over 800 npm libraries. Unlike the first wave, this iteration features destructive behavior that activates if it fails to steal credentials or establish persistence,
Nov 25, 2025 Email 1: Subject: Cyberattack on Third-Party Vendor Puts Top Banks’ Customer Data at Risk Content: – Large-scale cyberattack on SitusAMC, a critical third-party vendor, exposes residential loan mortgage data from major banks like JPMorgan Chase, Citi, and Morgan Stanley. – Attack confirmed on Nov. 12, with law
Nov 23, 2025 Email 1: Subject: Best infosec-related long reads for the week of 11/15/25 Sender: info@metacurity.com Summary: – This edition from Metacurity highlights several in-depth infosec stories. – Features a sophisticated Bitcoin scam involving elaborate social engineering, luxury meetings, and seed phrase theft leading to a $220,000 loss. –
Nov 21, 2025 Email 1 Summary: Subject: AI-Powered Espionage Will Favor China – Anthropic revealed an AI-orchestrated cyber espionage campaign, believed to be Chinese state-sponsored. – The campaign used an autonomous framework built on Claude Code to conduct reconnaissance, exploitation, lateral movement, credential harvesting, data analysis, and exfiltration, largely autonomously
Nov 20, 2025 Subject: Risky Bulletin: Microsoft to Integrate Sysmon into Windows 11 Sender: risky-biz@ghost.ioD Summary: – Microsoft announces integration of Sysmon, a tool from the Sysinternals suite, directly into future versions of Windows 11 to enhance security log analysis. – Microsoft Intune will add features such as Windows point-in-time
Nov 19, 2025 I just heard about some critical cybersecurity developments that we can’t ignore. A recent report from Mastercard and Picus revealed that many organizations are still vulnerable to adaptive cyber threats, despite relying on traditional security measures. Alarmingly, nearly half of the tested environments had successful password cracking