This website uses cookies
Read our Privacy policy and Terms of use for more information.
X’s InfoSec Newsletter
Weekly curated list of {Cyber,Info}Security insightful resources and links, and some other security & privacy things too.
Written by
Connect
malware
+5
Oct 31, 2026
•
8 min read
Plus: A leak site published data on 41,000 DHS employees and contractors, Google gave Gemini 4 Carbon to trusted cyber defenders first, and Cisco SD-WAN zero-day attacks were tied to Volt Typhoon’s “Silent Train” network
Oct 24, 2026
9 min read
Plus: Oracle patched over 1,200 vulnerabilities in one update, Meta was ordered to pay New Mexico $25 billion over privacy deception, and the AKIRA group has hit about 200 Swiss companies
Oct 17, 2026
Plus: Microsoft patched a record 1,400+ flaws this Patch Tuesday, French supermarket refrigeration systems were forced to heat up remotely, and an OpenAI employee was arrested for hiding a recording device in the executive conference room
Oct 10, 2026
7 min read
Plus: Plus: ShinyHunters is slowly being dismantled with two arrests and a possible third, Pwn2Own Ireland paid $1.26M for 98 zero-days including AI products, and FortiBleed is still active six months on
Oct 3, 2026
Plus: KillSec was dismantled and its alleged leader is 16, the Pentagon's personnel agency exposed 3 million records for nine months, and ShinyHunters is mass-exploiting Oracle PeopleSoft with URL encoding tricks
Sep 26, 2026
Plus: ShinyHunters claims it breached the FBI via Oracle PeopleSoft, Colorado water utilities were hit again with possible Iran links, and EvilTokens AI phishing-as-a-service got taken down with 12,000 victims
Sep 11, 2026
6 min read
Plus: Microsoft's September Patch Tuesday fixed 966 flaws and two zero-days, ShinyHunters claimed the Florida DMV database, and Chrome is now shipping updates every two weeks
Sep 5, 2026
Plus: U.S. strikes on Iran pushed federal agencies to warn about retaliatory attacks on water and utility systems, the Sality botnet was disrupted after 23 years, and Pegasus found its way onto Serbian activists' phones
Aug 29, 2026
Plus: TeamPCP finally got two arrests in Australia, Slovak traffic cameras came with a Russian backdoor pre-installed, and SharePoint exploit chains are being actively weaponized
![🕵🏻♂️ [InfoSec MASHUP] 44/2026 - Decentralized Until Something Needs Freezing](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=720,fit=scale-down,onerror=redirect/uploads/publication/thumbnail/ab407690-3f0c-4109-add5-5e9bf75e0e54/landscape_infosecMASHUP-substack-banner.png)
