“Reckless” Ben’s Videos Keep Getting More Damning. His Pro Se Lawyering Keeps Getting Worse.
from the lego-lawyering dept One thing that we’ve heard for many years in covering a variety of ridiculous civil and […]
What Is a ClickFix Attack? What Security Teams Need to Teach Users
What is a ClickFix attack? A ClickFix attack is a social engineering technique where attackers trick a user into running
13 nations issue warning over Russian cyber targeting
Russian state-sponsored hackers are breaking into critical infrastructure around the world by exploiting poorly configured and vulnerable networking devices, authorities
NYC seeks to scrap police union challenge to disclosure of officers’ disciplinary records
New York City’s largest police union says a public watchdog’s release of unsubstantiated misconduct claims causes irreparable damage to officers’
Prompt Injection and the Rise of Agentic Risk
Boxers will often say, the punches that hurt the most aren’t the ones which are thrown with the most force,
Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for June 2026, which includes 206 vulnerabilities affecting a range of products, including 32 that Microsoft marked as
Remembering Sir Alex Younger
There are moments when you meet a person who you immediately know will have a formative influence on you —
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
Cyber-attackers are increasingly deploying a stealthy technique which enables them to spoof OAuth Client IDs to gain access to cloud
Someone Is Scanning for Your MCP Servers and AI Assistant Credentials
I pulled 14 days of Apache and ModSecurity logs from a single small web host. Nothing special about it. A
CISA Warns Of CVE-2026-48939, CVE-2026-56291 Zero-Days
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities (KEV) catalog after reports confirmed active zero-day attacks