# https://digitaldefensesociety.com


## Posts

- [ICE Has Been Dumping Protester Photos Into a Palantir Database](https://digitaldefensesociety.com/ice-has-been-dumping-protester-photos-into-a-palantir-database/): An explosive and newly partially unsealed court filing alleges that the US Department of Homeland Security built up dossiers on ICE observers—including their photos, license plate numbers, and other information—and stored them in a heavily customized system called the Investigative Case Management database, which was built using proprietary software from and hosted by Palantir.
- [A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data](https://digitaldefensesociety.com/a-flaw-in-chatgpts-mac-app-could-have-let-hackers-grab-sensitive-data/): Hardly a day goes by lately without news of AI agents autonomously hacking websites or AI tools being used by cybercriminals and scammers.
- [Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data](https://digitaldefensesociety.com/hacks-of-2-federal-agencies-in-a-month-have-spilled-a-bonanza-of-sensitive-data/): The Pentagon is informing more than 2 million current and former military members that their personnel records storing sensitive personal information were stolen over a monthslong compromise of one of its networks.
- [Experience What It’s Like to Travel in the Occupied West Bank](https://digitaldefensesociety.com/experience-what-its-like-to-travel-in-the-occupied-west-bank/)
- [FBI tells ShinyHunters members to turn themselves in, after arrest of alleged leader](https://digitaldefensesociety.com/fbi-tells-shinyhunters-members-to-turn-themselves-in-after-arrest-of-alleged-leader/): The FBI has a very simple message for the ShinyHunters gang: give yourselves up.
- [ShinyHunters suspect arrested, and is now investigated over alleged murder plots](https://digitaldefensesociety.com/shinyhunters-suspect-arrested-and-is-now-investigated-over-alleged-murder-plots/): An alleged key figure in the ShinyHunters cybercrime group has been arrested in the Netherlands, and - in a grotesque turn - the 24-year-old suspect is also being investigated for attempting to arrange two murders.
- [The Secrets of the US Spyware King](https://digitaldefensesociety.com/the-secrets-of-the-us-spyware-king/): Spyware maker Paragon Solutions has long positioned itself as the good guy in an industry seemingly filled with bad ones, vowing to never sell its mobile spyware to authoritarian regimes or ones with poor human rights records.
- [Attackers have been exploiting critical Zimbra flaw to steal emails](https://digitaldefensesociety.com/attackers-have-been-exploiting-critical-zimbra-flaw-to-steal-emails/): Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and authentication credentials of vulnerable organzations, Microsoft has warned.
- [Cloudflare plans to issue quantum-safe TLS certificates](https://digitaldefensesociety.com/cloudflare-plans-to-issue-quantum-safe-tls-certificates/): In February, Google announced a solution: Merkle Trees.
- [Pentagon personnel database breach exposes personal data of millions](https://digitaldefensesociety.com/pentagon-personnel-database-breach-exposes-personal-data-of-millions/): The US Department of Defense has confirmed a breach at one of its main repositories of personnel information, the Defense Manpower Data Center (DMDC), that has exposed the sensitive details of just over three million people.
- [How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank](https://digitaldefensesociety.com/how-israeli-checkpoints-choke-palestinian-life-in-the-occupied-west-bank/): Lost time. Lost jobs. Lost friends. Lost family.
- [OpenAI Gets Sued Over the Hugging Face Hack](https://digitaldefensesociety.com/openai-gets-sued-over-the-hugging-face-hack/): A legal nonprofit sued OpenAI in a California court on Tuesday over the company’s agents escaping a testing environment and hacking the open source AI platform Hugging Face.
- [OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government](https://digitaldefensesociety.com/openai-pauses-training-its-most-powerful-models-after-rogue-agents-target-government/): OpenAI said it has paused training its most powerful artificial intelligence models as incidents of agents breaching websites’ security controls or posting to third-party sites continue to pile up.
- [Old-School Credit Card Scams Are Far From Dead](https://digitaldefensesociety.com/old-school-credit-card-scams-are-far-from-dead/): Welcome to Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security.
- [Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?](https://digitaldefensesociety.com/your-uncles-frozen-mac-says-its-infected-after-viewing-a-google-ad-now-what/): Researchers say they recently found Google ads delivering a sophisticated tech support scam that freezes the screens of both Windows and Mac devices and displays messages urgently instructing them to phone a bogus call center.
- [PI’s response to the UK Department for Science, Innovation & Technology on data regulation in the age of AI and other data-intensive technologies](https://digitaldefensesociety.com/pis-response-to-the-uk-department-for-science-innovation-technology-on-data-regulation-in-the-age-of-ai-and-other-data-intensive-technologies/): How AI challenges the foundational assumptions of data protection law across the AI lifecycle — training, process and output.
- [Ukrainian ransomware developer jailed for nearly 13 years](https://digitaldefensesociety.com/ukrainian-ransomware-developer-jailed-for-nearly-13-years/): A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him from Switzerland for ten years, for developing ransomware that blackmailed companies around the world.
- [There's a new way to break RSA that's faster than anything we've seen before](https://digitaldefensesociety.com/theres-a-new-way-to-break-rsa-thats-faster-than-anything-weve-seen-before/): The forgery attack drops these levels to 265, 290, and 2119 for 1024-, 2048-, and 4096-bit keys respectively.
- [An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later](https://digitaldefensesociety.com/an-openai-agent-hacked-australias-health-service-their-government-found-out-months-later/): Australia is investigating whether OpenAI broke the law after an agent hacked into its health statistics portal in the first widely known incident of an AI agent hacking a government website.
- [Human rights standards and guidelines on the use of digital technologies in electoral processes](https://digitaldefensesociety.com/human-rights-standards-and-guidelines-on-the-use-of-digital-technologies-in-electoral-processes/): As the use of digital technologies in electoral processes is growing in scale and scope, so too does their impact on human rights.
- [Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras](https://digitaldefensesociety.com/smashing-security-podcast-486-vibe-coded-shops-and-hackable-flock-cameras/): I have to say, what this reminds me of is there was a glitch on Amazon for a while.
- [FBI rushes to investigate if ShinyHunters hack of thousands of employees is real](https://digitaldefensesociety.com/fbi-rushes-to-investigate-if-shinyhunters-hack-of-thousands-of-employees-is-real/): To get the advisory changed, ShinyHunters told FBI director Kash Patel and the assistant director of the FBI Cyber Division, Brett Leatherman, that they had one week to comply with demands or presumably risk a breach of sensitive employee data.
- [Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw](https://digitaldefensesociety.com/metas-muse-ai-assistant-rolled-out-with-a-serious-security-flaw/): Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day vulnerability that gives locally run apps and terminal commands complete control of the agent raises serious doubts.
- [Microsoft disrupts AI-assisted platform that compromised 12,000 accounts](https://digitaldefensesociety.com/microsoft-disrupts-ai-assisted-platform-that-compromised-12000-accounts/): Microsoft said Tuesday that it led an industry-wide disruption of a subscription-based scam platform that used an AI chatbot to compromise 12,000 Microsoft accounts over a few-month span.
- [A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight](https://digitaldefensesociety.com/a-new-tool-found-malware-thats-guided-by-an-ai-hive-mind-no-humans-in-sight/): For years, cybersecurity practitioners have tracked different types of malware and detected potential infections using digital fingerprints to identify different hacking tools and follow their use over time.
- [Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day](https://digitaldefensesociety.com/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/): A simple ClickFix attack is only one way to completely hijack the new agent.
- [An Arsenal of Surveillance: A Guide to the Technologies Harming Migrants](https://digitaldefensesociety.com/an-arsenal-of-surveillance-a-guide-to-the-technologies-harming-migrants/): Governments around the world are building increasingly sophisticated surveillance infrastructures to monitor migrants, asylum seekers and refugees at borders and within countries.
- [An undercover Google analyst infiltrated a notorious supply-chain hacking gang](https://digitaldefensesociety.com/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang/): Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
- [Researchers used Claude to hack OpenAI](https://digitaldefensesociety.com/researchers-used-claude-to-hack-openai/): They exploited a flaw in the set-up of OpenAI’s community forum, which is hosted by a third-party, Discourse, and used it to gain access to internal sign-ons and eventually an OpenAI employee’s ChatGPT account.
- [LLMs respond differently to harmful prompts when AI watermarking is used](https://digitaldefensesociety.com/llms-respond-differently-to-harmful-prompts-when-ai-watermarking-is-used/): Standard versus watermarked text generation.
- [Qué Putería: Care on Dating Apps is a Collective Matter, Too](https://digitaldefensesociety.com/que-puteria-care-on-dating-apps-is-a-collective-matter-too/): Around an olla comunitaria (community pot: an outdoor community kitchen, usually run by women using donated food and set up as a care space to feed people during crises and protest) in one of central Medellín’s neighbourhoods, a printed publication is being passed from hand to hand.
- [What will the new Convention on Decent Work in the Platform Economy mean for workers and what's next?](https://digitaldefensesociety.com/what-will-the-new-convention-on-decent-work-in-the-platform-economy-mean-for-workers-and-whats-next/): On 12 June 2026, the International Labour Conference adopted the C193 Convention on Decent Work in the Platform Economy.
- [Hackers reveal how Flock cameras really track cars and people](https://digitaldefensesociety.com/hackers-reveal-how-flock-cameras-really-track-cars-and-people/): One hacked camera captured 1.6 million images and could detect people as well as cars.
- [Building a Rights-Respecting Digital Future in Pakistan](https://digitaldefensesociety.com/building-a-rights-respecting-digital-future-in-pakistan/): A digital service can look efficient on a screen while feeling confusing, unsafe or inaccessible to the person who depends on it.
- [Interoperability, Privacy, and the Limits of the Digital Markets Act](https://digitaldefensesociety.com/interoperability-privacy-and-the-limits-of-the-digital-markets-act/): The European Union’s Digital Markets Act (DMA) has begun to mandate interoperability, identifying the largest platforms as “gatekeepers” and requiring them to open up to competitors in certain ways.
- [Microsoft Patches Two Dozen RCE Flaws in Office](https://digitaldefensesociety.com/microsoft-patches-two-dozen-rce-flaws-in-office/): Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities.
- [BAE Systems cyberattack disrupts US federal court operations](https://digitaldefensesociety.com/bae-systems-cyberattack-disrupts-us-federal-court-operations/): The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts.
- [Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis](https://digitaldefensesociety.com/proofpoint-inks-6-3-billion-all-cash-deal-to-acquire-varonis/): Proofpoint has agreed to acquire data and AI security firm Varonis in an all-cash deal valued at roughly $6.3 billion, the two companies announced on Thursday.
- [China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers](https://digitaldefensesociety.com/china-linked-hackers-exploited-beyondtrust-zero-day-to-take-over-remote-support-servers/): The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.
- [CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing](https://digitaldefensesociety.com/cert-in-warns-ai-agents-accessed-sensitive-data-at-indian-organizations-during-testing/): AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15.
- [BeyondTrust patches zero-day exploited in attacks since August](https://digitaldefensesociety.com/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/): BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
- [Why Active Directory weaknesses stay open for years in teams with one or two admins](https://digitaldefensesociety.com/why-active-directory-weaknesses-stay-open-for-years-in-teams-with-one-or-two-admins/): David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks.
- [The cyber talent shortage? Job postings just hit a four-year low](https://digitaldefensesociety.com/the-cyber-talent-shortage-job-postings-just-hit-a-four-year-low/): US employers posted 235,786 cybersecurity jobs from January through September 2026.
- [Stolen AI API keys are paying for hackers’ autonomous scans](https://digitaldefensesociety.com/stolen-ai-api-keys-are-paying-for-hackers-autonomous-scans/): A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans.
- [PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions](https://digitaldefensesociety.com/peerstitch-malware-deployed-via-fortios-flaw-bypasses-checks-on-tagged-vpn-sessions/): A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.
- [DDoS attacks can knock services offline before links reach capacity](https://digitaldefensesociety.com/ddos-attacks-can-knock-services-offline-before-links-reach-capacity/): More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report.
- [New infosec products of the week: October 16, 2026](https://digitaldefensesociety.com/new-infosec-products-of-the-week-october-16-2026/): Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds.
- [Fastfetch 2.70.0 changes how Disk free space is reported](https://digitaldefensesociety.com/fastfetch-2-70-0-changes-how-disk-free-space-is-reported/): Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs.
- [SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape](https://digitaldefensesociety.com/sector-2026-reveals-a-rapidly-shifting-cybersecurity-landscape/): The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
- [F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud](https://digitaldefensesociety.com/f-secure-launches-victim-first-scam-encyclopedia-covering-50-types-of-consumer-fraud/): Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
- [Federal bankruptcy courts dealing with outages after contractor cyberattack](https://digitaldefensesociety.com/federal-bankruptcy-courts-dealing-with-outages-after-contractor-cyberattack/): A cyberattack on a U.S. government contractor has impacted the platform used by all federal bankruptcy courts across the country.
- [AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too](https://digitaldefensesociety.com/ai-slop-isnt-just-for-social-media-its-ruining-cyberattacks-too/): Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
- [Targeted ads delivered 0-click exploits to install mercenary malware](https://digitaldefensesociety.com/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/): Among the major vendors that listed Discover-Tech as a “certified” or “verified” vendor were Google and the advertising industry association IAB Europe.
- [Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers](https://digitaldefensesociety.com/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/): Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.
- [Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory](https://digitaldefensesociety.com/critical-pwnescape-linux-kernel-vulnerability-lets-guest-vms-read-host-memory/): A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on.
- [Android gets AI defenses against messaging scams, fake calls](https://digitaldefensesociety.com/android-gets-ai-defenses-against-messaging-scams-fake-calls/): Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices.
- [Zero-click spyware infecting devices through online ads, researchers say](https://digitaldefensesociety.com/zero-click-spyware-infecting-devices-through-online-ads-researchers-say/): Powerful zero-click spyware is being delivered to individuals worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
- [ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More](https://digitaldefensesociety.com/threatsday-adobe-rce-dns-wallet-theft-nvidia-container-escape-self-healing-backdoor-23-more/): Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature.
- [Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth](https://digitaldefensesociety.com/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/): A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network.
- [Context Is King in the Fight Against Modern Cyberattacks](https://digitaldefensesociety.com/context-is-king-in-the-fight-against-modern-cyberattacks/): For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too.
- [Fake Arch Linux packages push malware with root privileges](https://digitaldefensesociety.com/fake-arch-linux-packages-push-malware-with-root-privileges/): A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
- [Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand](https://digitaldefensesociety.com/watch-now-zero-trust-strategies-summit-all-sessions-available-on-demand/): This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.
- [Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads](https://digitaldefensesociety.com/citizen-lab-traces-zero-click-candiru-spyware-infections-at-al-jazeera-to-targeted-online-ads/): Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.
- [Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks](https://digitaldefensesociety.com/silent-lynx-exploits-winrar-flaw-to-deploy-reverse-shell-in-cis-government-attacks/): The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
- [Vulnerability Management Isn't About the Score — It's About How It Applies to You](https://digitaldefensesociety.com/vulnerability-management-isnt-about-the-score-its-about-how-it-applies-to-you/): Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
- [UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978](https://digitaldefensesociety.com/uk-legal-aid-agency-hack-worse-than-thought-with-stolen-records-dating-back-to-1978/): A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed, officials said Wednesday.
- [UK Legal Aid Agency Hack Scope Widens After Forensic Review](https://digitaldefensesociety.com/uk-legal-aid-agency-hack-scope-widens-after-forensic-review/): The UK’s Legal Aid Agency (LAA) has discovered that records dating back to 1978 were compromised in an April 2025 data breach.
- [Update Chrome: Google fixes 37 security flaws, including seven critical bugs](https://digitaldefensesociety.com/update-chrome-google-fixes-37-security-flaws-including-seven-critical-bugs/): On October 13 and 14, Google issued several Chrome updates.
- [Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams](https://digitaldefensesociety.com/help-tds-linked-to-hotejka-as-20000-cloudflare-pages-domains-host-tech-support-scams/): A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777.
- [Is AI pentesting as good as a human pentester?](https://digitaldefensesociety.com/is-ai-pentesting-as-good-as-a-human-pentester/): With the rise of AI pentesting, a lot of people are wondering if it’s as good as a human.
- [Suspected Kazakhstan-linked hackers target governments across former Soviet states](https://digitaldefensesociety.com/suspected-kazakhstan-linked-hackers-target-governments-across-former-soviet-states/): A cyber-espionage group with suspected ties to Kazakhstan has targeted government agencies across Central Asia and other former Soviet states, seeking information on diplomatic affairs, economic policy and strategic resources, according to new research.
- [KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims](https://digitaldefensesociety.com/kgb-rat-trojan-packs-webcam-spying-password-theft-and-a-fun-menu-to-terrorize-victims/): A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made to frighten the person on the other side of the screen.
- [ServiceNow gives AI agents a passport, and limits on what they can do](https://digitaldefensesociety.com/servicenow-gives-ai-agents-a-passport-and-limits-on-what-they-can-do/): ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.
- [Fake CAPTCHAs are tricking users into running malware on their own devices](https://digitaldefensesociety.com/fake-captchas-are-tricking-users-into-running-malware-on-their-own-devices/): Fake CAPTCHA checks are being used to do more than hide phishing pages.
- [Microsoft: Windows Server 2022 reached end of mainstream support](https://digitaldefensesociety.com/microsoft-windows-server-2022-reached-end-of-mainstream-support/): Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031.
- [NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks](https://digitaldefensesociety.com/nginx-fixes-5-flaws-including-possible-rce-and-a-tls-bug-that-may-skip-client-cert-checks/): NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.
- [Is this link safe? Find out with Malwarebytes Scam Link Check](https://digitaldefensesociety.com/is-this-link-safe-find-out-with-malwarebytes-scam-link-check/): Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account.
- [Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers](https://digitaldefensesociety.com/supermarket-refrigeration-attack-widens-to-copeland-dixell-controllers/): The cyberattack that disrupted refrigeration at hundreds of French supermarkets this week also affected equipment from Copeland and its Dixell brand, according to France’s national cybersecurity agency ANSSI.
- [Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing](https://digitaldefensesociety.com/next-js-ships-out-of-band-patch-for-two-critical-rce-flaws-in-caching-and-svg-processing/): Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
- [Thermo Fisher Torrent Suite Software](https://digitaldefensesociety.com/thermo-fisher-torrent-suite-software/): Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.
- [J4Care dcm4che](https://digitaldefensesociety.com/j4care-dcm4che/): Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
- [Guangzhou Juan IoT Technology EseeCloud](https://digitaldefensesociety.com/guangzhou-juan-iot-technology-eseecloud/): Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.
- [CISA Adds One Known Exploited Vulnerability to Catalog](https://digitaldefensesociety.com/cisa-adds-one-known-exploited-vulnerability-to-catalog/): CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- [Eclipse Foundation Eclipse Milo](https://digitaldefensesociety.com/eclipse-foundation-eclipse-milo/): Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.
- [CISA Malcolm](https://digitaldefensesociety.com/cisa-malcolm/): Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite.
- [Police arrests 95 suspects in international CSAM crackdown action](https://digitaldefensesociety.com/police-arrests-95-suspects-in-international-csam-crackdown-action/): Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups.
- [Sextortion “help” firm took $60 million from victims, FTC alleges](https://digitaldefensesociety.com/sextortion-help-firm-took-60-million-from-victims-ftc-alleges/): The Federal Trade Commission (FTC) has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists.
- [CikaBika Bot RAT Uses Discord for C&C](https://digitaldefensesociety.com/cikabika-bot-rat-uses-discord-for-cc/): Darktrace has uncovered a new malware campaign distributing a Rust-based RAT that relies on Discord for command-and-control (C&C).
- [Raven AI lets cops find your home from a photo taken inside](https://digitaldefensesociety.com/raven-ai-lets-cops-find-your-home-from-a-photo-taken-inside/): Photos you take with your phone and some digital cameras can contain hidden information, including where they were taken.
- [CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products](https://digitaldefensesociety.com/cisa-flags-exploited-flaws-in-palo-alto-cisco-and-ahsay-products/): The agency added them based on evidence of active exploitation and has given US federal civilian agencies three days, until October 17, 2026, to address the vulnerabilities.
- [Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies](https://digitaldefensesociety.com/novel-android-rat-hirudo-replaces-banking-apps-with-trojanized-copies/): A novel RAT uses trojanized replacements of legitimate banking apps to neutralize security controls from inside itself.
- [‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads](https://digitaldefensesociety.com/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads/): On Thursday, researchers from The Citizen Lab at the University of Toronto revealed a worst-case scenario found in the wild: spyware silently infecting targets as they browse past ads in their daily digital lives.
- [CenterPoint Energy Data Breach Impacts 1 Million Texans](https://digitaldefensesociety.com/centerpoint-energy-data-breach-impacts-1-million-texans/): CenterPoint Energy has notified Texan authorities that the personal information of over 1 million individuals was compromised in a data breach.
- [Microsoft fixes bug causing Windows black screens, Explorer crashes](https://digitaldefensesociety.com/microsoft-fixes-bug-causing-windows-black-screens-explorer-crashes/): Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.
- [CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO](https://digitaldefensesociety.com/ciso-conversations-james-robinson-many-jobs-one-journey-to-netskope-ciso/): At school James Robinson was more sporty than STEM, but after school he rose from the track to cybersecurity leader at Netskope.
- [EU Grocers Pay a Steep Price for Unpatched Fridge Firmware](https://digitaldefensesociety.com/eu-grocers-pay-a-steep-price-for-unpatched-fridge-firmware/): Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
- [Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference](https://digitaldefensesociety.com/smashing-security-podcast-488-how-a-ransomware-negotiator-ended-up-arrested-at-his-own-conference/): Well, it could be unfashionable trousers.
- [Ukraine says Elon Musk's Starshield service partially restored after restrictions disrupted drone missions](https://digitaldefensesociety.com/ukraine-says-elon-musks-starshield-service-partially-restored-after-restrictions-disrupted-drone-missions/): The Ukrainian military can again use SpaceX’s Starshield satellite service on the move, a Defense Ministry source told Recorded Future News on Thursday, days after sudden restrictions disrupted drone missions along the front line.
- [Fridge hack costing millions and sparking fires stemmed from poor security](https://digitaldefensesociety.com/fridge-hack-costing-millions-and-sparking-fires-stemmed-from-poor-security/): Besides running controllers with outdated firmware, the affected stores likely also failed to put the devices behind a VPN and create a restricted list of IP addresses allowed to log in.
- [Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles](https://digitaldefensesociety.com/ivanti-ics-zero-day-attacks-highlight-vendor-patching-hurdles/): CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
- [Yam Store: The Phishing Network Behind a Billion Messages](https://digitaldefensesociety.com/yam-store-the-phishing-network-behind-a-billion-messages/): A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
- [Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat](https://digitaldefensesociety.com/anthropic-sneakpeek-flaw-is-a-silent-zero-click-threat/): A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
- [AI worms could spread across your smart devices, Anthropic warns](https://digitaldefensesociety.com/ai-worms-could-spread-across-your-smart-devices-anthropic-warns/): Your streaming box might not look like much of a computer. But connect enough inexpensive devices together, and they can run an AI model.
- [Russian Influence Operation Widely Targets Latin America](https://digitaldefensesociety.com/russian-influence-operation-widely-targets-latin-america/): The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
- [Anthropic warns small AI models could self-replicate through IoT devices](https://digitaldefensesociety.com/anthropic-warns-small-ai-models-could-self-replicate-through-iot-devices/): This finding was the starting point for further research that asked: Would it be possible for small models to create self-replicating infections that run themselves on IoT devices the way traditional IoT worms, like Mirai, install DDoS code and other payloads?
- [CISA Adds Four Known Exploited Vulnerabilities to Catalog](https://digitaldefensesociety.com/cisa-adds-four-known-exploited-vulnerabilities-to-catalog/): CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- [Update Windows: Record Patch Tuesday fixes flaw already under attack](https://digitaldefensesociety.com/update-windows-record-patch-tuesday-fixes-flaw-already-under-attack/): Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws.
- [Fake Calendly “Meta Careers” pages steal Facebook and Google logins](https://digitaldefensesociety.com/fake-calendly-meta-careers-pages-steal-facebook-and-google-logins/): We found a wave of websites posing as Calendly booking pages for job interviews at Meta.
- [Police receive fake murder tip from Anthropic’s Claude AI](https://digitaldefensesociety.com/police-receive-fake-murder-tip-from-anthropics-claude-ai/): Police tip hotlines already have their fair share of crank callers. Apparently they now have to contend with crank AI agents as well.
- [Ransomware Gangs Embrace Physical Threats, Family Stalking?](https://digitaldefensesociety.com/ransomware-gangs-embrace-physical-threats-family-stalking/): Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
- [An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office](https://digitaldefensesociety.com/an-openai-employee-allegedly-used-a-chatbot-to-help-plant-a-recording-device-at-the-office/): An engineer at OpenAI allegedly concealed an audio recording device in a piece of toilet paper and attached it behind a monitor inside an executive conference room at one of the company’s San Francisco offices, according to a criminal complaint unsealed on Tuesday.
- [Grindr users’ sensitive data shared through ad auctions without valid consent](https://digitaldefensesociety.com/grindr-users-sensitive-data-shared-through-ad-auctions-without-valid-consent/): Norway’s privacy regulator Datatilsynet has fined advertising technology company Xandr 92 million Norwegian kroner, approximately $9.6 million, for unlawfully processing and sharing sensitive information about Grindr users.
- [Inductive Automation Ignition Software](https://digitaldefensesociety.com/inductive-automation-ignition-software/): Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.
- [Swann Communications SWIFI-SE2KIC](https://digitaldefensesociety.com/swann-communications-swifi-se2kic/): Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.
- [CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure](https://digitaldefensesociety.com/cisa-urges-patching-newly-exploited-vulnerability-in-ivanti-connect-secure/): CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior.
- [Hackers heat up supermarket fridges, spoiling food across France](https://digitaldefensesociety.com/hackers-heat-up-supermarket-fridges-spoiling-food-across-france/): A cyberattack has forced hundreds of supermarkets across France to throw away refrigerated and frozen food after attackers interfered with the systems that keep it cold.
- [GTA 6 leaker threatens to release full playable version of game ahead of official launch](https://digitaldefensesociety.com/gta-6-leaker-threatens-to-release-full-playable-version-of-game-ahead-of-official-launch/): The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.
- [Global Report on the Authoritarian use of Technology](https://digitaldefensesociety.com/global-report-on-the-authoritarian-use-of-technology/): We have been observing and monitoring an increase in states’ adoption of authoritarian practices and policies.
- [Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer](https://digitaldefensesociety.com/feds-got-warrants-to-use-fake-cell-towers-to-hunt-down-don-lemons-producer/): US law enforcement agents obtained authorization to use a controversial surveillance device capable of intercepting cell phone signals to find and arrest a 21-year-old college student who helped produce journalist Don Lemon’s coverage of an anti-ICE protest, court filings show.
- [AI Is Getting Really Good at Messing With Cybercriminals](https://digitaldefensesociety.com/ai-is-getting-really-good-at-messing-with-cybercriminals/): Welcome to Kernel Panic!, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security.
- [$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack](https://digitaldefensesociety.com/10-million-bounty-offered-for-chinese-hafnium-hacker-accused-of-microsoft-exchange-server-mega-attack/): The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese national who is accused of being a key figure in China's state-sponsored hacking group, Hafnium.
- [ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests](https://digitaldefensesociety.com/ice-agent-at-nyc-shooting-has-history-of-alleged-violence-and-illegal-arrests-2/): An Immigration and Customs Enforcement agent on the scene of a shooting in upper Manhattan on Thursday has repeatedly been accused in federal court of unlawful arrests and using force during arrests in New York and Minneapolis, a WIRED investigation finds.
- [Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027](https://digitaldefensesociety.com/lets-encrypt-cuts-certificate-lifetimes-to-64-days-starting-february-2027/): Let’s Encrypt is continuing a push toward tighter security by reducing free SSL/TLS certificate lifetimes from 90 days to 64 days, starting February 10, 2027.
- [The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe](https://digitaldefensesociety.com/the-man-behind-a-west-bank-telegram-channel-trying-to-keep-palestinian-drivers-safe/): The first time we were supposed to meet Anas Hattab, he canceled at the last minute: There was no way to make it from his hometown in Tulkarm, in the northern West Bank, south to Ramallah, where we were meeting, and back before it got dark.
- [Smashing Security podcast #487: Clippy’s crypto comeback](https://digitaldefensesociety.com/smashing-security-podcast-487-clippys-crypto-comeback/): It's October, which means it's Cybersecurity Awareness Month.
- [Shaq Got Hacked. Now He’s Pitching for a VPN](https://digitaldefensesociety.com/shaq-got-hacked-now-hes-pitching-for-a-vpn/): At a promotional event in Times Square on Wednesday for the security company NordVPN, brand ambassador Shaquille O’Neal said he is eager to raise awareness among regular people about the importance of digital security and personal privacy.
- [The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos](https://digitaldefensesociety.com/the-pentagon-hopes-to-speed-up-kill-chain-ai-buys-with-5-minute-videos/): An under-the-radar procurement program led by the Department of Defense has been granting special statuses to would-be defense contractors that make it easier for the government to quickly purchase their AI offerings, based on product videos that must be no longer than five minutes.
- [When AI agents act outside their remit](https://digitaldefensesociety.com/when-ai-agents-act-outside-their-remit/): In July 2026, AI agents being tested by OpenAI escaped restrictions intended to keep them isolated, gained Internet access and compromised the systems of Hugging Face and other third parties.
- [Hackers obtain counterfeit TLS certificates for Google and other large services](https://digitaldefensesociety.com/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/): “While Chrome took steps during these incidents to identify and block suspected unauthorized certificates across the affected ccTLDs, browser-side intervention should not be relied on to protect your users,” Google said.
- [OpenAI agents tried to hack Wikipedia tools and flooded it with traffic](https://digitaldefensesociety.com/openai-agents-tried-to-hack-wikipedia-tools-and-flooded-it-with-traffic/): The publisher of Wikipedia said Monday that OpenAI agents attempted to hack a note-taking tool it hosts, made unauthorized edits, and sent millions of resource-intensive requests to its infrastructure, in the latest instance of OpenAI systems taking harmful and potentially dangerous actions.
- [PI's response to the UK Goverment's consultation on workplace monitoring technologies](https://digitaldefensesociety.com/pis-response-to-the-uk-goverments-consultation-on-workplace-monitoring-technologies/): Gaps in the principles around data minimisation and purpose limitation, including the risk of "scope creep" (such as a driver-facing camera introduced for road safety being repurposed for disciplinary action), and the need for a clear prohibition on selling or sharing worker data beyond its original purpose, including following a company's bankruptcy or closure.
- [MCP for agent-to-agent comms may be the riskiest protocol you've never heard of](https://digitaldefensesociety.com/mcp-for-agent-to-agent-comms-may-be-the-riskiest-protocol-youve-never-heard-of/): Trust gaps in the new protocol spread malicious prompts from one agent to another.
- [Muse Creates Detailed Profiles of All Your Friends and Family](https://digitaldefensesociety.com/muse-creates-detailed-profiles-of-all-your-friends-and-family/): Welcome to Kernel Panic!, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security.
- [N0n ransomware: what you need to know](https://digitaldefensesociety.com/n0n-ransomware-what-you-need-to-know/): N0n is a newly-emerged cyber extortion gang.
- [Apple changes full-disk access permissions to curb abuse from AI agents](https://digitaldefensesociety.com/apple-changes-full-disk-access-permissions-to-curb-abuse-from-ai-agents/): Apple says it is changing its macOS privacy settings to stop third-party app developers from misusing them to access message histories.

## Pages

- [Contact Us](https://digitaldefensesociety.com/contact-us/): Have a question about cybersecurity, online privacy, digital safety, or one of our articles? We would love to hear from you.
- [Terms and Conditions](https://digitaldefensesociety.com/terms-and-conditions/): Welcome to Digital Defense Society, accessible at https://digitaldefensesociety.com/. These Terms and Conditions govern your access to and use of our website.
- [Privacy Policy](https://digitaldefensesociety.com/privacy-policy/): At Digital Defense Society, accessible at https://digitaldefensesociety.com/, we respect your privacy and are committed to protecting your personal information.


[comment]: # (Generated by Hostinger Tools Plugin)