News that matters, without the noise.

Nightclub Giant RCI Says Data Breach Affects 40,000 Individuals

The company detected a network intrusion in March and an investigation showed that some files were stolen during

The Evil MSI Background is Back!, (Fri, Jun 5th)

A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture.

Let’s Encrypt Unveils Merkle Tree Certificates to Secure the Web Against Quantum Threats

Let’s Encrypt has announced its roadmap for post-quantum Web PKI, centering on a novel approach called Merkle Tree

ClawHub, Cisco, Vercel’s Malicious Skill Detector Bypassed to upload Malicious Skills

AI skill scanners from ClawHub, Cisco, and Vercel’s skills. The platform can be bypassed with minimal effort, allowing

HexStrike AI RED-TEAM With 127 Security Tools and BOAZ Red Team Integration

A fork of the original HexStrike AI project has been released as HexStrike AI v6.0, an advanced Model Context

ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)

Rust-Written IronWorm Hits NPM Supply Chain

Like Shai-Hulud, the campaign targets developers to steal credentials and reuses them to propagate across the software supply

Defense tech, AI, and fundraising take center stage at StrictlyVC Los Angeles on June 18

With just two weeks to go, StrictlyVC Los Angeles is quickly approaching. On Thursday, June 18, at The Aerospace Corporation Campus

Filtr is a new privacy tool that blocks ads in almost every iPhone and Mac app

This popular ad blocker app for iPhones, iPads, and Macs can now block ads from loading inside apps,

Hackers Impersonate Ghidra, dnSpy, and SpiderFoot to Spread Malware via Fake Download Sites

Hackers are creating convincing fake websites that impersonate popular security tools to trick users into downloading malware. Instead

binding.gyp Supply Chain Attack Compromises Dozens of npm Packages Across Maintainer Accounts

A self-replicating worm has been quietly spreading across the npm registry using a method most security teams do

4 Critical Threats Where Attackers Have the Advantage

Gartner analysts issued a call to action to bolster defenses against several emerging critical threats, such as deepfakes