Light bulb Limited Spots Available: Secure Your Lifetime Subscription on Gumroad!

Articles & Guides

Showing 15 of 1143 posts · RSS
TeamPCP Just Backdoored Checkmarx's Jenkins Plugin—the Same Group That Hit Trivy and Used Stolen Credentials From One Build Server to Hop to the Next
Article

TeamPCP Just Backdoored Checkmarx's Jenkins Plugin—the Same Group That Hit Trivy and Used Stolen Credentials From One Build Server to Hop to the Next

May 12, 2026 · 11 min read

Four Canadian Privacy Regulators Just Ruled OpenAI Violated Five Privacy Laws to Train ChatGPT—and the 'Publicly Available Information' Defense Failed in All Four Provinces
Article

Four Canadian Privacy Regulators Just Ruled OpenAI Violated Five Privacy Laws to Train ChatGPT—and the 'Publicly Available Information' Defense Failed in All Four Provinces

May 12, 2026 · 11 min read

Texas Just Filed a 'Surveillance Machinery' Lawsuit Against Netflix—5 Petabytes of Behavioral Data a Day, Captured From Kid Profiles Too
Article

Texas Just Filed a 'Surveillance Machinery' Lawsuit Against Netflix—5 Petabytes of Behavioral Data a Day, Captured From Kid Profiles Too

May 12, 2026 · 10 min read

California Just Issued Its Largest Privacy Fine Ever—$12.75 Million—Because GM Sold Hundreds of Thousands of OnStar Drivers' Locations to Two Data Brokers
Article

California Just Issued Its Largest Privacy Fine Ever—$12.75 Million—Because GM Sold Hundreds of Thousands of OnStar Drivers' Locations to Two Data Brokers

May 12, 2026 · 9 min read

RansomHouse Says It Stole the Source Code Behind Trellix—the Cybersecurity Firm 50,000 Companies and Governments Rely On
Article

RansomHouse Says It Stole the Source Code Behind Trellix—the Cybersecurity Firm 50,000 Companies and Governments Rely On

May 11, 2026 · 7 min read

A "Screenshot" in DigiCert's Support Chat Was Actually a Screensaver Virus—And It Walked Out With 60 Valid Code Signing Certificates
Article

A "Screenshot" in DigiCert's Support Chat Was Actually a Screensaver Virus—And It Walked Out With 60 Valid Code Signing Certificates

May 11, 2026 · 7 min read

The First Infostealer That Doesn't Decrypt Anything on Your Computer Just Hit 1,715 Victims—Including Gmail and Coinbase Logins
Article

The First Infostealer That Doesn't Decrypt Anything on Your Computer Just Hit 1,715 Victims—Including Gmail and Coinbase Logins

May 11, 2026 · 7 min read

Cushman & Wakefield Got Phished by Phone—Then ShinyHunters Dumped 50GB of Salesforce Data When the Ransom Deadline Passed
Article

Cushman & Wakefield Got Phished by Phone—Then ShinyHunters Dumped 50GB of Salesforce Data When the Ransom Deadline Passed

May 11, 2026 · 6 min read

JDownloader's Own Website Quietly Replaced the Windows Installer With a Python Backdoor for at Least 24 Hours—Defender Was the Only Thing That Caught It
Article

JDownloader's Own Website Quietly Replaced the Windows Installer With a Python Backdoor for at Least 24 Hours—Defender Was the Only Thing That Caught It

May 10, 2026 · 9 min read

The #1 Trending Repository on Hugging Face Last Week Was Not From OpenAI—It Was a Rust Infostealer Disguised as 'Privacy Filter'
Article

The #1 Trending Repository on Hugging Face Last Week Was Not From OpenAI—It Was a Rust Infostealer Disguised as 'Privacy Filter'

May 10, 2026 · 9 min read

Zara Did Not Lose Your Address—But ShinyHunters Knows Exactly What You Bought, Where, and What You Wrote to Customer Service
Article

Zara Did Not Lose Your Address—But ShinyHunters Knows Exactly What You Bought, Where, and What You Wrote to Customer Service

May 10, 2026 · 8 min read

A Brazilian Banking Trojan Just Used One Hijacked Outlook Inbox to Spam 3,000 Contacts at a Time—And It Spreads Through WhatsApp Web Too
Article

A Brazilian Banking Trojan Just Used One Hijacked Outlook Inbox to Spam 3,000 Contacts at a Time—And It Spreads Through WhatsApp Web Too

May 10, 2026 · 9 min read

Google's Top Result for 'ManageWP' Was a Phishing Site—Each Stolen Login Controls Hundreds of WordPress Sites
Article

Google's Top Result for 'ManageWP' Was a Phishing Site—Each Stolen Login Controls Hundreds of WordPress Sites

May 08, 2026 · 11 min read

A New Credential Stealer Called PCPJack Tracks Whether You're Already Infected by Its Rivals—Then Kicks Them Out
Article

A New Credential Stealer Called PCPJack Tracks Whether You're Already Infected by Its Rivals—Then Kicks Them Out

May 08, 2026 · 11 min read

A Fake Claude AI Site Has Been Pushing 'Beagle' Malware for Months—and the Trojan Horse Was a G Data Antivirus Binary
Article

A Fake Claude AI Site Has Been Pushing 'Beagle' Malware for Months—and the Trojan Horse Was a G Data Antivirus Binary

May 08, 2026 · 11 min read