Inside Shanya, a packer-as-a-service fueling modern attacks
The ransomware scene gains another would-be EDR killer
Read More
Researchers Jailbreak AI by Flooding It With Bullshit Jargon
You can trick AI chatbots like ChatGPT or Gemini into teaching you how to make a bomb or hack an ATM if you make the question complicated, full of academic jargon, and cite sources that do not exist. That’s the conclusion of a new paper authored by a team of researchers from Intel, Boise State…
Github Banned a Ton of Adult Game Developers and Won’t Explain Why
Developers making mods and plugins for hentai games and sex toys say Github recently unleashed a wave of suspensions and bans against their repositories, and the platform hasn’t explained why. Developers I spoke to said the community estimated around 80 to 90 repositories containing the work of 40 to 50 people went down recently, with…
I am not a robot: ClickFix used to deploy StealC and Qilin
The fake human verification process led to infostealer and ransomware infections
We let OpenClaw loose on an internal network. Here’s what it found
Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks Categories: Threat Research Tags: OpenClaw, LLM, AI, penetration testing, Red Team, CISO, Sophos X-Ops
Tumbler Ridge Shooter Created Mall Shooting Simulator in Roblox
Jesse Van Rootselaar, the 18-year-old suspected of killing eight people and injuring 25 in a mass shooting in a secondary school in Canada, created a Roblox game that allowed players to simulate a mass shooting in a level that looks like a shopping mall, Roblox has confirmed. “We have removed the user account connected to…
Podcast: A Massive Archiving Effort at National Parks (with Jenny McBurney and Lynda Kellam)
If you’ve been to a national park in the U.S. recently, you might have noticed some odd new signs about “beauty” and “grandeur.” Or, some signs you were used to seeing might now be missing completely. An executive order issued earlier this year put the history and educational aspects of the parks system under threat–but…
How Benn Jordan Discovered Flock’s Cameras Were Left Streaming to the Internet
On the podcast this week, I talked to YouTuber Benn Jordan, who has done some of our favorite reporting on Flock, the automated license plate reader surveillance company. A couple months ago, he found vulnerabilities in some of Flock’s license plate reader cameras. I have been following Benn’s work for a while, and soon after…
OpenAI’s Sora 2 Copyright Infringement Machine Features Nazi SpongeBobs and Criminal Pikachus
Within moments of opening OpenAI’s new AI slop app Sora, I am watching Pikachu steal Poké Balls from a CVS. Then I am watching SpongeBob-as-Hitler give a speech about the “scourge of fish ruining Bikini Bottom.” Then I am watching a title screen for a Nintendo 64 game called “Mario’s Schizophrenia.” I swipe and I…
Week in review: 48k Fortinet firewalls open to attack, attackers “vishing” orgs via Microsoft Teams
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 48,000+ internet-facing Fortinet firewalls still open to