The Wave

1. 5h agoWiz Research · research by WizPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
2. YesterdayAnthropic · research by IrregularInvestigating three incidents in our cybersecurity evaluationsAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

   2 articles

   1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
   2. YesterdayAnthropicEmotion concepts in a large language model

   CyberAI60 linked
3. 5d agoCyberScoop · research by ESETRussian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governmentsESET disclosed a new modular Turla toolset ("Turla's Cereal") that uses compromised Microsoft Exchange servers as command-and-control to covertly steal emails from Kazakhstan's and a Romanian government agency's systems.

   7 articles · 6 outlets · BleepingComputer, Computerworld

   1. 5d agoCyberScoopEarliestRussian Turla group used new toolset to silently pilfer emails from Kazakhstan, Romanian governments
   2. 5d agoBleepingComputerPickupTurla hackers use new Cereal malware to spy on govt Exchange servers
   3. 5d agoThe RecordPickupRussian hackers compromised government email servers to steal NATO, EU correspondence
   4. 4d agoComputerworldPickupNew malware doesn’t call home, it turns your Exchange server into its home
   5. 4d agoC4ISRNETPickupRomanian servers targeted by Russian hackers to scoop up emails about NATO, EU
   6. 4d agoDefense NewsPickupRomanian servers targeted by Russian hackers to scoop up emails about NATO, EU
   7. 3d agoThe RecordPickupRomania says it stopped Russian cyberattack targeting government emails

   Cyber48 linked
4. 4d agoYahoo · research by SRIRomanian intelligence agency says it identified Russian-linked cyber attackRomania's intelligence agency SRI attributed a December 2025 cyberattack on a government organisation to the Russian-linked Turla group, which exploited Microsoft operating system vulnerabilities.1 outletCyber8 linked
5. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

   19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

   1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
   2. 2d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
   3. 2d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
   4. 2d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
   6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
   7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
   8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
   10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
   11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
   12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
   13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
   14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
   15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
   16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
   17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
   18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
   19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

   Cyber448 linked
6. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
7. 6d agoTechCrunchAnthropic releases new Mythos and Fable models amid RSI concernsAnthropic launched Mythos 5.2 and Fable 5.2, cutting Fable's price and disclosing rising evaluation-awareness and covert-capability concerns alongside a METR report on recursive self-improvement.1 outletAI3 linked
8. 6d agoYahooCoalition of the Willing kicks off first exercise for post-war Ukraine deploymentCoalition of the Willing will hold KOALICJA 26.2, a multinational exercise in Poland, France and Turkey, to rehearse deploying the Multinational Force-Ukraine after a ceasefire.

   2 articles

   1. 8d agoDefense NewsEarliestEuropean troops set to train in Poland for postwar Ukraine deployment
   2. 6d agoYahooPickupCoalition of the Willing kicks off first exercise for post-war Ukraine deployment

   14 linked
9. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
10. 9d agoDark ReadingUK Wades Into Tech Sovereignty Amid AI Policy ChangesUK government unveiled a roughly £600 million package to strengthen cyber defenses and AI security, with about £154 million for current cyber defenses and the rest for homegrown AI and cloud initiatives.1 outletCyberAI7 linked
11. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
12. 11d agoDark ReadingFresh European Fridge Attacks Put Cold-Chain Security in FocusEuropean authorities are probing a second wave of attacks that forced supermarket refrigerators into defrost mode at chains including ICA, Kesko, Ahold Delhaize and Colruyt, with exposed Danfoss and Copeland xweb controllers linked to the flaws.

    2 articles

    1. 12d agoCybersecurity DiveEarliestEuropean authorities probe ongoing attacks targeting grocery refrigerators
    2. 11d agoDark ReadingPickupFresh European Fridge Attacks Put Cold-Chain Security in Focus

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks6 linked
13. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
14. 12d agoSRISRI’s smart lidar imager joins DARPA’s ERIS MarketplaceSRI announces its dynamically biased Geiger-mode lidar imager has been added to DARPA's ERIS Marketplace, making it available for government customers to buy.1 outletDefense2 linked
15. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

1. GrantDefense Sciences OfficeOct 20DARPA Defense Sciences Office seeks proposals for the 2027 Young Faculty Award program (solicitation DARPARA2701), with responses due January 13, 2027.Closes in 59 daysDefenseLifecycle6 linked