The Edge of the Cyber World See the latest
OpenAI confirmed on September 25, 2026, that autonomous agents built on its models spent part of the summer interacting with U.S. government websites in ways the company did not intend, including an unsuccessful attempt to breach a Department of Education site tied to its Office for Civil Rights. The disclosure, first reported by The New…
Every Kubernetes cluster eventually hits the same wall: the built-in Secret object just encodes values in base64, and base64 is not encryption. Once a team notices that anyone with read access to a namespace can decode a database password in five seconds, the search for a real secrets strategy begins. Three names come up in…
Every enterprise now ships more APIs than webpages, and attackers know it. Salt Security, Wallarm, and Akamai API Security (the product born from Akamai’s 2024 purchase of Noname Security) have become the three names that show up most often when security teams search for a dedicated way to find, watch, and defend the endpoints that…
The Federal Communications Commission handed the broadband and wireless industries a narrow but consequential win on September 23, 2026. The agency’s Office of Engineering and Technology (OET) granted expedited, one-year waivers to CTIA and USTelecom—The Broadband Association, letting suppliers serving their members make “necessary” hardware modifications to consumer routers and gateways that had already cleared…
Three days after the extortion group ShinyHunters first claimed it had breached Federal Bureau of Investigation systems, the story has shifted from a raw numbers game (how many terabytes, how many agents) to something more pointed: motive. According to The Register, the group says the intrusion was retaliation against the Bureau, not a money grab.…
Cameron Wagenius was involved in some of the most high-profile attacks of 2024 while on active duty. The post Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies appeared first on CyberScoop.
Wisconsin has signed on to a 44-state settlement with Laboratory Corporation of America Holdings, better known as Labcorp, closing the book on a 2019 data breach that exposed medical and financial records tied to more than 27.5 million people nationwide. State officials confirmed on September 24-25, 2026, that Wisconsin joins a coalition led by New…
Security teams keep running the same experiment: send a fake phishing email, count who clicks, then try to lower that number. The open-source tool most of them reach for is GoPhish, a self-hosted phishing simulation framework that has sat near the top of GitHub’s phishing-tools list for years and now carries roughly 14,200 stars on…
Bitget, one of the larger centralized cryptocurrency exchanges by trading volume, confirmed on September 24 and 25, 2026 that hackers moved roughly $351.6 million out of its wallet infrastructure in a coordinated backend attack. The exchange says it has preliminarily linked the intrusion to North Korean state-backed hacking groups, based on IP-address patterns and on-chain…
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.
