The Wave

1. 5h agoWiz ResearchPHP2Shell: Exploitation Attempts and Remediation Trends | Wiz BlogWiz Research finds that PHP2Shell exploitation attempts so far have failed to complete end-to-end, while exposed vulnerable hosts dropped sharply after the October 2026 disclosure.1 outletCyber7 linked
2. 5h agoWiz Research · research by WizPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
3. YesterdayAnthropic · research by IrregularInvestigating three incidents in our cybersecurity evaluationsAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

   2 articles

   1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
   2. YesterdayAnthropicEmotion concepts in a large language model

   CyberAI60 linked
4. 2d agoThe RecordDOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018The Justice Department detailed a Operation Endgame takedown that removed Gootloader from more than 100 servers and tied the malware to $28.8 million in U.S. ransomware losses since 2018.1 outletCyber15 linked
5. 4d agoYahoo · research by SRIRomanian intelligence agency says it identified Russian-linked cyber attackRomania's intelligence agency SRI attributed a December 2025 cyberattack on a government organisation to the Russian-linked Turla group, which exploited Microsoft operating system vulnerabilities.1 outletCyber8 linked
6. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

   19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

   1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
   2. 2d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
   3. 2d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
   4. 2d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
   6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
   7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
   8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
   11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
   12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
   13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
   14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
   15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
   16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
   17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
   18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
   19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

   Cyber448 linked
7. 4d agoWiz ResearchBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

   10 articles

   1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
   2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
   3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
   4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
   5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
   6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
   7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
   8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
   9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
   10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

   Cyber161 linked
8. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
9. 5d agoWiz Research · research by WizAI監査とは？セキュリティの観点から | WizWiz's explainer defines AI audits as structured reviews of AI models, data, pipelines and infrastructure for security, compliance and intended operation, and maps the frameworks and cloud-security tooling used to run them.1 outlet20 linked
10. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
11. 6d agoTechCrunchAnthropic releases new Mythos and Fable models amid RSI concernsAnthropic launched Mythos 5.2 and Fable 5.2, cutting Fable's price and disclosing rising evaluation-awareness and covert-capability concerns alongside a METR report on recursive self-improvement.1 outletAI3 linked
12. 6d agoYahooCoalition of the Willing kicks off first exercise for post-war Ukraine deploymentCoalition of the Willing will hold KOALICJA 26.2, a multinational exercise in Poland, France and Turkey, to rehearse deploying the Multinational Force-Ukraine after a ceasefire.

    2 articles

    1. 8d agoDefense NewsEarliestEuropean troops set to train in Poland for postwar Ukraine deployment
    2. 6d agoYahooPickupCoalition of the Willing kicks off first exercise for post-war Ukraine deployment

    14 linked
13. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
14. 9d agoArs Technica SpaceChainalysis says hackers stole credentials and tokens for all of its customersChainalysis disclosed that an AI agent-assisted intrusion in October 2026 exposed credentials, password hashes, and live tokens for all of its customers, including government agencies.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks1 linked
15. 9d agoThe RecordFBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackersFormer FBI supervisory agent Patrick Steven Yaroch pleaded guilty to stealing over $2.4 million in cryptocurrency; he faces sentencing in March.1 outletCyber14 linked
16. 9d agoDark ReadingUK Wades Into Tech Sovereignty Amid AI Policy ChangesUK government unveiled a roughly £600 million package to strengthen cyber defenses and AI security, with about £154 million for current cyber defenses and the rest for homegrown AI and cloud initiatives.1 outletCyberAI7 linked
17. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
18. 13d agoSemaforDemocrats weigh ‘lawfare’ against TrumpSemafor reports that corporate America is readying executives for likely post-midterm Democratic congressional scrutiny over business dealings that courted President Trump.

    7 articles

    1. 13d agoSemaforDemocrats weigh ‘lawfare’ against Trump
    2. 12d agoSemaforPickupDemocrats eye post-election powers
    3. 12d agoSemaforEarliestCorporate America prepares for post-midterm Democratic backlash
    4. 11d agoSemaforDemocrats turn scrutiny to tech CEOs and Trump officials
    5. 11d agoSemaforPickupDemocrats to focus on affordability and corruption probes
    6. 11d agoSemafor‘Out for blood’: Investigations overshadow dealmaking in newly divided Washington
    7. 9d agoSemaforDemocrats’ CEO targets remain a work in progress

    Democrats plan House oversight probes as Blanche won't rule out charges against Garcia47 linked
19. 11d agoDark ReadingFresh European Fridge Attacks Put Cold-Chain Security in FocusEuropean authorities are probing a second wave of attacks that forced supermarket refrigerators into defrost mode at chains including ICA, Kesko, Ahold Delhaize and Colruyt, with exposed Danfoss and Copeland xweb controllers linked to the flaws.

    2 articles

    1. 12d agoCybersecurity DiveEarliestEuropean authorities probe ongoing attacks targeting grocery refrigerators
    2. 11d agoDark ReadingPickupFresh European Fridge Attacks Put Cold-Chain Security in Focus

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks6 linked
20. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
21. 13d agoCensysThoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2ShellCensys argues that AI-driven vulnerability hype overstates risk, uses the PHP2Shell crisis and its own long-term patch-behavior research to show that patch deployability and legacy maintenance matter more than raw vulnerability counts.1 outletCyber3 linked
22. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.