Posts

Krebs - Felons, Fraudsters Flog Offensive Cybersecurity Startup

Image
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names. The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000 followers since its creation in January 2025, posting frequently about security vulnerabilities, AI and software exploits. IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities. The IRIS C2 website dangles the possibility of million-dollar payouts for exploits to attract talent. “Our business model is this,” reads a pinned post on top of the IRIS C2 account on X. “Attract the very best vulnerability researchers and exploit developers in the world to join our company. This mostly revolves around junior engineers with raw talent/extreme...
Post a Comment
Read more

KnowBe4 - Hyper-Targeted Social Engineering Needs Real-Time Video Response

Image
There’s an important metric that can tell you exactly how vulnerable your high-risk employees and departments are to the next generation of social engineering . from KnowBe4 Blog https://blog.knowbe4.com/hyper-targeted-social-engineering-video-response
Post a Comment
Read more

The Hacker News - GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code

An AI coding assistant that refuses to answer a dangerous request in its chat box can answer it anyway if the same request is broken into small, ordinary-looking steps inside a code editor. That is the finding of a new study of GitHub Copilot by researchers Abhishek Kumar and Carsten Maple. The models they tested through Copilot, Claude from Anthropic, and Gemini from Google, refused from The Hacker News https://thehackernews.com/2026/07/github-copilot-refuses-harmful-requests.html
Post a Comment
Read more

KnowBe4 - Your Email is Protected. Is Your Teams Chat?

Image
For years, security teams have poured resources into locking down the inbox, and for good reason. Email has always been the front door for phishing and social engineering. Unfortunately, another door has been left wide open: Microsoft Teams. from KnowBe4 Blog https://blog.knowbe4.com/your-email-is-protected.-is-your-teams-chat
Post a Comment
Read more

Schneier - Cybersecurity and the Gap Between Skill and Ability

Last week, national security agencies from the Five Eyes—that’s the rich, English-language-speaking countries club—jointly released a statement warning of the increasing cyber risks of AI models: in particular, their ability to autonomously hack into systems and networks. The statement was more measured than some of the breathless headlines about it, and the advice they gave is pretty much the standard advice everyone gives—albeit with newfound urgency. Internet risks are nothing new, and cyberattacks—both large and small—have been a significant issue since long before the current crop of generative AI models. What’s been changing over the decades, and what AI is changing even faster, is the gap between skill and ability. For most of human history, the two terms were synonymous—but computers have decoupled them. As the gap between the two expands, humans empowered with these AI tools can do more: more writing, more research, more analy...
Post a Comment
Read more

The Hacker News - China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware

A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking devices. According to findings from Cisco Talos, UAT-7810 is an advanced persistent threat (APT) actor that's responsible for maintaining and proliferating LapDogs, an ORB network that first came to light in June 2025. from The Hacker News https://thehackernews.com/2026/07/china-linked-uat-7810-expands-orb.html
Post a Comment
Read more

KnowBe4 - 2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Image
Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: how likely is your workforce to fall for a phishing attack? The results, published in the 2026 Phishing by Industry Benchmarking Report , paint a clear picture of where human risk concentrates — and what organizations can do about it. from KnowBe4 Blog https://blog.knowbe4.com/2026-phishing-industry-benchmarking-report
Post a Comment
Read more