Latest Articles
A China-nexus group hid a full-control backdoor inside a real Chinese wallpaper app, the kind of harmless adware nobody takes seriously. That is exactly why it worked. The disguise was so convincing the ads never even ran, and that was the tell that gave it away.
Most attackers try not to get caught. Fire Ant breaks in, then disables the cameras and edits the tapes. The China-nexus actor turned Cisco routers into spying platforms, suppressed the logs, and altered what admins were even allowed to see.
A critical VMware vCenter flaw was patched on July 29. Five days later, a suspected China-nexus actor was already inside, across 361 IPs in 47 countries. It ended in ransomware, but QUIRSO says that was likely a smokescreen. The encryption was the costume. The access was the objective.
For 86 minutes on August 20, compiling a Rust project was enough to install an infostealer, no malicious code ever called. An attacker hijacked the account behind arrayref, a tiny crate riding in three-quarters of all Rust environments. You never trusted arrayref. You trusted the account.
For US$320 a month, NovaCookies rents anyone the ability to walk past your MFA. It does not steal your password. It steals your session, the proof you already logged in, after you authenticate perfectly. MFA did not fail. It just stopped being the finish line.
Microsoft patched over 400 flaws in a single month, triple the normal load, because AI now hunts bugs faster than any human team. But real-world exploitation has not surged to match. The scary number is not 400. It is 13 of 14, and the gap is closing fast.
Berlin refused to pay the ransomware crew that breached its network. Good. But the data was already gone a week before anyone pulled the plug. Refusing to pay is the honorable call, and it does not save you. The failure that mattered happened quietly, days earlier.
TITAN says its AI reads 700GB of stolen data an hour. The number is unverified marketing, and the group is a nobody: 24 victims in four months against leaders posting 100 a month. The real AI-in-ransomware story is quieter, and it is not TITAN.
SKO is a spectacle of forced enthusiasm, hollow leadership, and empty theatrics, wrapped in corporate excess. True value lies not in scripted speeches but in the rare, genuine connections between colleagues. The show fades, the noise quiets, but real bonds endure long after the lights dim.
Tokyo winters are deceptively beautiful, with clear skies and crisp air masking an unforgiving cold that seeps into the bones. The city scents sharpen, and warmth feels distant. Venturing out is a battle, but relief is near. Spring approaches, bringing the promise of comfort and renewal.
Co-Founder
2024-Current
Director, Threat Intelligence Strategy, APJ & META
2019-2024
Senior Security Advisor
2013-2019
Chief, Cyber Security
2008-2013
Senior Systems Engineer
2005-2008
Co-Founder
2000-2005
Security Operations Center Supervisor
2000-2005
Telecommunications & Cyber Security
1990-1999