This website uses cookies
Read our Privacy policy and Terms of use for more information.
X’s InfoSec Newsletter
Weekly curated list of {Cyber,Info}Security insightful resources and links, and some other security & privacy things too.
Written by
Connect
malware
+5
Oct 24, 2026
•
9 min read
Plus: Oracle patched over 1,200 vulnerabilities in one update, Meta was ordered to pay New Mexico $25 billion over privacy deception, and the AKIRA group has hit about 200 Swiss companies
Oct 17, 2026
Plus: Microsoft patched a record 1,400+ flaws this Patch Tuesday, French supermarket refrigeration systems were forced to heat up remotely, and an OpenAI employee was arrested for hiding a recording device in the executive conference room
Oct 10, 2026
7 min read
Plus: Plus: ShinyHunters is slowly being dismantled with two arrests and a possible third, Pwn2Own Ireland paid $1.26M for 98 zero-days including AI products, and FortiBleed is still active six months on
Oct 3, 2026
Plus: KillSec was dismantled and its alleged leader is 16, the Pentagon's personnel agency exposed 3 million records for nine months, and ShinyHunters is mass-exploiting Oracle PeopleSoft with URL encoding tricks
Sep 26, 2026
Plus: ShinyHunters claims it breached the FBI via Oracle PeopleSoft, Colorado water utilities were hit again with possible Iran links, and EvilTokens AI phishing-as-a-service got taken down with 12,000 victims
Sep 11, 2026
6 min read
Plus: Microsoft's September Patch Tuesday fixed 966 flaws and two zero-days, ShinyHunters claimed the Florida DMV database, and Chrome is now shipping updates every two weeks
Sep 5, 2026
Plus: U.S. strikes on Iran pushed federal agencies to warn about retaliatory attacks on water and utility systems, the Sality botnet was disrupted after 23 years, and Pegasus found its way onto Serbian activists' phones
Aug 29, 2026
Plus: TeamPCP finally got two arrests in Australia, Slovak traffic cameras came with a Russian backdoor pre-installed, and SharePoint exploit chains are being actively weaponized
Aug 22, 2026
Plus: Cl0p's PTC Windchill zero-day is hitting 40+ companies with GE, Philips, and Shell named so far, Oracle shipped 943 patches in one update, and US agencies warn AI is generating Siemens PLC exploits
![🕵🏻♂️ [InfoSec MASHUP] 43/2026 - The Patch Window Is a Race Now](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=720,fit=scale-down,onerror=redirect/uploads/publication/thumbnail/ab407690-3f0c-4109-add5-5e9bf75e0e54/landscape_infosecMASHUP-substack-banner.png)
