All topics
Michael Clark, director of Threat Research at Sysdig, talks about a recent LLM-driven extortion campaign dubbed JADEPUFFER, touching on how the team discovered it, how attackers’ “intent is now legible,” and what that means for defenders. Links Sysdig research: https://www.sysdig.com/blog/jadepuffe… https://www.sysdig.com/blog/jadepuffe…
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft–662 bugs–and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced. Links Cursor bug: https://decipher.sc/2026/07/15/bug-in… First VPN […]
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
We’re back from a fun July 4th break, and this week’s news brings us the emergence of a nasty bug in many AI coding assistants, the approaching tipping point for macOS malware, and how AI-enabled phishing kits are changing the game. Plus: Some weird news about a former ransomware negotiator who was working with threat […]
Like EvilTokens and Kali365, Forg365 is distributed through Telegram and offered as a commoditized service for attackers who want to target Microsoft 365 environments.
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
