that's a secret, but you can guess
Newsletter
A 225,370-patient HIPAA settlement puts phishing controls back on the board agenda, while Unbound DNSSEC and Issabel PBX show how “one weird parser bug” or “one hard-coded secret” can become remote code execution at internet scale.
Newsletter
Zero-click Pixel modem exploits meet a max-severity Cisco ISE auth bypass, while attackers go after the thing you rely on most: backups. Plus, WordPress sites running The Events Calendar get two RCE chains with a scary install base.
Newsletter
FulcrumSec dumps 8.8 million Manchester Airports records after MAG refuses to pay. Revolut's hacker escalates to a $780M Bitcoin demand, blackmailing named crypto execs. CenterPoint Energy confirms a breach, and WSO2's CVSS 9.8 flaw is under active attack.
Newsletter
A bad day for “it’s patched, we’re fine” thinking: a utility confirms a 7.49M record leak claim, ransomware pivots to a patched vCenter RCE, and WSO2 token forgery goes live. Also: Acronis plugin LPE already seeing exploitation.
Newsletter
Cisco says CVE-2026-76461 is actively exploited, and it is already in CISA KEV. Leak-site monitors logged 190 new ransomware victim posts last week, while a weird new “stolen LLM gateway pool” pattern shows agents reselling access at scale.
Newsletter
A third-party email vendor incident triggers 347K Trezor phishing blasts, Cisco FMC is getting rooted in the wild by multiple clusters, Citrix NetScaler auth bypass sits in KEV, and Totolink router PoCs drop today. Plus: LLM access resale and passkey-themed lures.
Newsletter
Revolut confirms it handed over passports and Bitcoin histories to a fake government request, GitLab’s CVSS 10 path traversal sees in-the-wild probes within a day, CISA flags two MikroTik RouterOS bugs as exploited, and an exploit kit jumps between spy crews.
Novo Nordisk lost 1.3TB to a token left in public JavaScript, a hospice pharmacy breach hits 800,000 patients, a Conti affiliate is off to prison, and two Windows zero-days are being exploited right now. Today's Secret CISO.
Newsletter
A zero-click worm hijacks WeChat before you answer, ShinyHunters hits 1 million Mathspace students, Anthropic catches AI running its own hacking campaigns, and a fake Claude app drains crypto wallets. Plus PaperCut's twice-broken patch and today's top CVEs.
Newsletter
A Russian-speaking crew's AI agents hit 11 orgs in 26 seconds, Air Canada gets hit by ransomware, Veradigm's patient SSNs face a Friday ransom deadline, and four spy groups quietly share the same Chrome-Windows exploit kit.
Newsletter
ShinyHunters claims Florida's DMV database, a mysterious 'white hat' drains $320M from Bitcoin's Liquid Network, Check Point exposes a ChatGPT flaw that leaks Gmail across accounts, and Patch Tuesday sets a new record with 973 CVEs.
Newsletter
A 220M-record traveler database exposed, BigBear's MFA-bypassing phishing kit hits 258 orgs, an unpatched Magento zero-day backdoors stores, and a perfect-10 N-able RCE gets actively exploited.