Trump administration opens door to private-sector cyber offensives
“Enterprise CISOs should be careful before feeding telemetry into these programs,” said Neil Shah, vice president for research at Counterpoint Research. “The threat intelligence is…
Author: Cybernoz
Anthropic set AI agents loose on the same task. They started a turf war.
What happens when you pit AI agents against each other? According to Anthropic’s testing, things get messy fast. On Thursday, Anthropic’s Frontier Red Team published…
How Wiz Secures Personal Repos in the Software Supply Chain
Most application security programs assume a clean boundary. Your code lives in your organization’s repositories, your identity provider governs who touches it, and controls like…
Curiouser and Curiouser
Welcome to this week’s edition of the Threat Source newsletter. “Experiment is the mother of knowledge.” ― Madeleine L'Engle, A Wrinkle in Time “Don't slide…
API Discovery Gap: The APIs Attackers Find Before You Do
Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure, and such exposure rarely gets tested. Attackers…
Hackers breach govt webmail while running parallel crypto fraud
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government…
Fortinet Patches Multiple Authentication Vulnerabilities in FortiWeb, FortiManager, and FortiClient
Fortinet has rolled out fixes for a batch of authentication-related vulnerabilities across its FortiWeb, FortiManager, and FortiClient product lines, urging administrators to patch quickly given…
Cybersecurity Professionals Who Ignore AI Are Arming Their Enemies
I build workforce development solutions. My whole job is recognizing where skill gaps may be opening up before they become crises, and I’m seeing a…
Akira Ransomware Affiliate Rebooted Into Safe Mode to Dodge EDR and Broke Its Own Attack
An affiliate of the Akira ransomware operation attempted a novel technique to blind endpoint defences during a recent intrusion, rebooting a compromised server into Windows…
Jewelbug Uses Public Google Docs as Malware Command-and-Control Delivery Channel
A China-linked threat group tracked as Jewelbug has turned public Google Docs into a resilient command-and-control delivery channel, embedding freshly obfuscated malware payloads in documents…
Kai: The Agentic AI Platform Built To Fight AI-Enabled Attacks
Kai was founded on a simple and radical conviction: you cannot win a machine-speed war with human-speed defenses. Not with more tools. Not with more headcount.…
White House authorizes private US companies to hack foreign criminal networks
President Trump signed a National Security Presidential Memorandum on August 12 allowing vetted private companies to run offensive cyber operations against foreign threat actors, under…