Latest Reports
Flash
One Hijacked Account, One Crate, 245 Million Rust Downloads at Risk
For 86 minutes on August 20, compiling a Rust project was enough to install an infostealer, with no malicious code ever called. A threat actor hijacked the account behind arrayref, a tiny crate riding in three-quarters of all Rust environments. You never trusted arrayref. You trusted the account.
NovaCookies Phishing Kit Steals Microsoft 365 Sessions to Bypass MFA
For US$320 a month, NovaCookies rents anyone the ability to walk past your MFA. It does not steal your password. It steals your session, the proof you already logged in, after you authenticate perfectly. MFA did not fail. It just stopped being the finish line, and the eCrime ecosystem noticed.
Microsoft Patched 400 Bugs This Month and That Is Not the Scary Part
Microsoft patched more than 400 flaws in a single month, triple the normal load, because AI now hunts bugs faster than any human team. But real-world exploitation has not surged to match. The scary number is not 400. It is 13 of 14, the share of unlikely bugs AI turned into working exploits.
Berlin Will Not Pay VICE SPIDER and Here Is Why It Changes Nothing
Berlin refused to pay VICE SPIDER, the threat actor behind Rhysida, after a breach of its network. Good. But the data was already gone a week before anyone pulled the plug. Refusing to pay is the honorable call, and it does not save you. The failure that mattered happened quietly, days earlier.
TITAN Is the Ransomware Threat Nobody Should Fear Yet
TITAN says its AI reads 700GB of stolen data an hour. The number is unverified marketing copy, and the adversary is a nobody, with 24 victims in four months against leaders posting 100 a month. The real AI-in-ransomware story is quieter, it is already running elsewhere, and it is not TITAN.
US Sanctions Chinese Firm Behind Salt Typhoon Telecom Breaches
The US Treasury Department has named a lone Chinese national responsible for the intrusions into nine US telecommunications companies.
Japan Deploys "Active Cyber Defense"
In the face of rising Nation State and eCrime threats, Japan is shifting to active cyber defense. This approach demands a unified, strategic foundation. Without it, Japan may end up more vulnerable than before, creating new risks instead of resolving old ones.