X-Industry

Today, someone who stores an encrypted file on a remote storage service cannot prove that the file was really deleted.  Encryption stops the service from reading the file today, but it doesn't stop the service from secretly keeping a spare copy.  If the decryption key later leaks, that spare becomes readable. In their paper “Semi-Quantum Cryptography with Certified Deletion,” Yael Tauman Kalai of MIT and Justin Raizes of NTT Research provide a method for a classical computer to use a quantum ser

Security researchers have warned of an ongoing campaign targeting an apparent vulnerability in camera management software.  The vulnerability is being used for initial access, allowing threat actors to establish a foothold on company infrastructure.  The warning bells were sounded by security outfit Huntress, whose researchers Harlan Carvey and Lindsey O'Donnell-Welch said that in September and October 2026, they observed a “handful of incidents” originating from camera management software.  In

Today marks the end of the Global Cybersecurity Awareness Month of October.  It is also Halloween.  So go out and have some fun.  But always keep in mind cyber security essentials, especially in this current lighting speed pace of technology and artificial intelligence.  Fundamentals are still crucial.  However, Cybersecurity Awareness Month 2026 took place at a completely different stage of cybersecurity development.  Being “aware” of cyberthreats is no longer sufficient because the threat land

A Russian-speaking ransomware affiliate known as Azazel has been caught operating one of the most audacious betrayals in the cybercriminal underground.  As an affiliate of the notorious Gentlemen ransomware group, Azazel used the gang's tools, negotiation channels, and ransom note templates while also running an independent leak site called LEAKNED.  Rather than routing victim data through the Gentlemen program, he published stolen information independently, exposing victims to extortion attempt

A Ukrainian man has been sentenced to 70 months in a US prison for his role in a series of ransomware attacks.  36-year-old Artem Stryzhak became an affiliate of the Nefilim ransomware group around June 2021, receiving an 80% cut of the ransoms he managed to extort in attacks against hospitals, government organizations, law firms, and businesses around the world.[1]

The rest of the ransom would go to Nefilim's administrators, including fellow Ukrainian Volodymyr Tymoshchuk, who was charged last

Rapid breach incident: Researchers gained access to Anthropic's internal systems in less than 12 hours by exploiting flaws in third-party software.  Patching limitations: Most AI agent vulnerabilities evade traditional patching processes, leaving critical issues unaddressed.  Isolation through zero trust: Applying identity-based controls removes network reachability, making AI workloads inaccessible to unauthenticated attackers.

Cathedral researchers breached sensitive internal systems at Anthro

Throughout 2026, the financially motivated, DPRK state-sponsored Lazarus subgroup TraderTraitor (aka UNC4899, PUKCHONG, Jade Sleet) has run campaigns targeting cryptocurrency trading entities, including a high-profile April attack in which the group stole USD 292 million from KelpDAO by compromising LayerZero.

KelpDAO is a decentralized finance (DeFi) protocol that supports Ethereum restaking; LayerZero Labs provides services that enable cryptocurrency exchange across different blockchain platfo

Cybersecurity researchers have detected a dramatic surge in fraudulent schemes aimed at compromising financial institutions and their clients.  According to data published by Fortra's Intelligence and Research Experts (FIRE), phishing attacks using remote management tools surged almost fivefold in the first nine months of 2026 compared with all of 2025.  These sophisticated campaigns focus heavily on retail and commercial banking customers. Threat actors deploy deceptive support portals that mim

A startling announcement went out earlier this week: Due to recently discovered vulnerabilities in the open-source programming language PHP, website owners had to immediately patch their sites, or if they couldn’t update right away, they should take the sites down to be safe.  Sean called this “a real reckoning moment” that highlights how “when you get down to the bone level of the internet,” everything seems to be “held together by glue and dreams.” And with widespread access to large language

A suspected Chinese-state aligned threat actor has leveraged an agentic AI framework to execute a supply chain compromise against ConnectWise Cloud Backup, automating attacks across hundreds of global organizations.  Active since at least 2021 and historically reliant on botnet infrastructure for evasive password spraying, the group was seen using ARTEX, a Go-based, multi-agent LLM penetration testing system, to conduct offensive operations at machine speed. By deploying AI agents configured to

A home 3D printer is a careful machine, but also a dumb one.  It can't tell the difference between a firearm and a firehose.  It reads a list of movements, heats a nozzle, and lays down plastic or metal in thin layers until a shape appears.  That list can describe a bracket for a shelf, a replacement knob for a dishwasher, or a receiver for a firearm.  To the printer, those files are the same kind of thing: geometry.[1]

On 26 September 2026, California Governor Gavin Newsom signed Assembly Bill

Personal information belonging to clients of Goldman Sachs’ wealth management business, Man Group, and Tishman Speyer has been exposed in a breach involving Ernst & Young LLP (EY), raising the stakes of an incident first disclosed in the summer.  Letters sent to clients at the end of September said an unauthorized third party accessed the platform between 28th March and 12th April 2026, downloading documents connected to multiple EY clients.  For customers, the practical question is therefore wh

StealC’s seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5.  Four months after Europol disrupted StealC during Operation Endgame, its seller has returned with Stadia, a new remote access trojan (RAT) that combines credential theft with remote control of Windows systems.  Hackread.com previously reported on StealC’s use in a FileFix phishing campaign in 2025. New research from cybersecurity firm

Cybersecurity experts at Sophos X-Ops have uncovered a new social engineering campaign that relies on a tactic dubbed ‘TerminalFix’ to compromise enterprise networks.  After Microsoft successfully disrupted fraudulent certificate-signing services earlier this year, threat actors quickly pivoted to alternative methods to infiltrate corporate environments. The latest research details how attackers now deceive users into manually pasting malicious commands into Windows Terminal, triggering a comple

A new AI agent developed to run a full cyber-attack without human intervention has been uncovered by security researchers.  The agent was designed to use hijacked AI models to autonomously run up to 100,000 malicious actions without human approval, including scanning for targets, exploiting vulnerabilities, stealing credentials, deploying cryptocurrency miners and reinfecting compromised systems.[1]

Researchers from the Symantec Threat Hunter Team found the malicious agent using an AI honeypot –

A major cyber-attack on commercial refrigeration systems across France has left more than 150 supermarkets facing millions of euros in damages after hackers remotely changed fridge temperatures overnight. The incident affected cold-chain control software at branches of Intermarché, E.Leclerc, and Coopérative U, also known as Super U. Instead of switching systems off, the attackers increased temperatures inside refrigerators and freezers at hundreds of sites to as high as 50 degrees Celsius overn

The leading identity protection firm Semperis has released its 2026 Ransomware Risk Report exposing how cybercriminals have adopted a new approach to pressure victims into paying ransom. Rather than limiting actions to data encryption or theft, attackers now direct psychological and physical threats towards executives, employees and their families. The study, which surveyed only organizations hit by ransomware in the past year across the US, UK, France, Germany, Italy, Spain, Singapore, Canada a

Yesterday, 21 October, the Internet was having a bad day, from a cybersecurity perspective. Government websites around the world went offline, Reuters reported, after AI discovered critical security vulnerabilities that impacted the programming language PHP.  The issues were severe enough that the US National Security Agency (NSA) advised organizations using PHP on their systems to either immediately update or take their systems offline until they could.[1]

But the PHP update wasn’t the only hea

Most enterprises didn’t choose multi-cloud as a deliberate strategy.  They ended up there: an acquisition brought in a company already running on a different provider, one team picked Amazon Web Services (AWS) because that’s what they knew, another spun up projects in Microsoft Azure because it bundled with existing licensing, and a third quietly built things in Google Cloud Platform (GCP) because a developer liked the tooling.[1]  Nobody sat down and designed this. And nobody ended up owning th

Dutch researchers cited by Reuters report that thousands of wind and solar power systems across Europe are exposed online. The findings have raised questions about how operators can protect increasingly connected energy infrastructure without disrupting the remote access needed to run it.  Wind and solar parks are often unmanned and spread across wide areas. Grid operators, energy traders and maintenance contractors rely on remote connections to monitor equipment and manage operations.  That con