This website uses cookies
Read our Privacy policy and Terms of use for more information.
X’s InfoSec Newsletter
Weekly curated list of {Cyber,Info}Security insightful resources and links, and some other security & privacy things too.
Written by
Connect
malware
+5
Nov 14, 2026
•
8 min read
Plus: 4,837 hijacked GitHub accounts targeted 61,000 repositories, Crédit Mutuel Arkéa lost about $133M through a service provider, and DeepMind agents made attacking 1024-bit RSA cheaper
Nov 7, 2026
Plus: Harvard’s 851,000 accounts were leaked after it refused a ransom, a China-backed group used AI agents against 200+ organizations in 11 days, and Google disrupted a 1.3M-device Android TV box botnet with a factory-built backdoor
Oct 31, 2026
Plus: A leak site published data on 41,000 DHS employees and contractors, Google gave Gemini 4 Carbon to trusted cyber defenders first, and Cisco SD-WAN zero-day attacks were tied to Volt Typhoon’s “Silent Train” network
Oct 24, 2026
9 min read
Plus: Oracle patched over 1,200 vulnerabilities in one update, Meta was ordered to pay New Mexico $25 billion over privacy deception, and the AKIRA group has hit about 200 Swiss companies
Oct 17, 2026
Plus: Microsoft patched a record 1,400+ flaws this Patch Tuesday, French supermarket refrigeration systems were forced to heat up remotely, and an OpenAI employee was arrested for hiding a recording device in the executive conference room
Oct 10, 2026
7 min read
Plus: Plus: ShinyHunters is slowly being dismantled with two arrests and a possible third, Pwn2Own Ireland paid $1.26M for 98 zero-days including AI products, and FortiBleed is still active six months on
Oct 3, 2026
Plus: KillSec was dismantled and its alleged leader is 16, the Pentagon's personnel agency exposed 3 million records for nine months, and ShinyHunters is mass-exploiting Oracle PeopleSoft with URL encoding tricks
Sep 26, 2026
Plus: ShinyHunters claims it breached the FBI via Oracle PeopleSoft, Colorado water utilities were hit again with possible Iran links, and EvilTokens AI phishing-as-a-service got taken down with 12,000 victims
Sep 11, 2026
6 min read
Plus: Microsoft's September Patch Tuesday fixed 966 flaws and two zero-days, ShinyHunters claimed the Florida DMV database, and Chrome is now shipping updates every two weeks
![🕵🏻♂️ [InfoSec MASHUP] 46/2026 - Rare Good News, Handle With Care](https://media.beehiiv.com/cdn-cgi/image/format=auto,width=720,fit=scale-down,onerror=redirect/uploads/publication/thumbnail/ab407690-3f0c-4109-add5-5e9bf75e0e54/landscape_infosecMASHUP-substack-banner.png)
