Metacurity

metacurity@infosec.exchange

Metacurity.com (<a href="https://metacurity.com" target="_blank" rel="nofollow noopener" translate="no">https://metacurity.com</a>) is the one-stop destination for leading infosec news and cybersecurity developments. Run by infosec writer and columnist Cynthia Brumfield, Metacurity draws from thousands of sources every day to deliver aggregated summaries of the latest infosec developments. If anyone wants to get in touch with me, on or off the record, you can reach me at cynthia [at] digitalcrazytown.com or on Signal via Cynthia.507. Sign up for our free daily emails at <a href="https://www.metacurity.com" target="_blank" rel="nofollow noopener" translate="no">https://www.

Posts

Post #4501495
Don't miss today's Metacurity for the most crucial developments cyber defenders should know, including --OpenAI loosens GPT-5.6 cyber guardrails for vetted defenders, --Anthropic to watermark Claude output worldwide, --Gunra ransomware targets critical infrastructure through Fortinet flaws, --WormGPT creator faces trial in Portugal --Ransomware disrupts systems at Winnipeg’s largest hospital, --China-linked hackers exploit N-central flaw to deploy ransomware, --AI-found Zoom flaws enabl...
Post #4487123
So eight people posed as would-be sugar daddies on a Hong Kong dating website, offering to pay victims HK$50,000 and HK$70,000 a month if they paid a so‑called legal fee in order to receive the money. They earned $6.2 million over two years doing this. https://news.rthk.hk/rthk/en/component/k2/1865627-20260810.htm?mid=1#cid=3662624
Post #4486244
Thailand is just now considering MFA for its government systems. Govt eyes stronger cyber defences as data leaks raise alarm https://www.bangkokpost.com/thailand/general/3299002/govt-eyes-stronger-cyber-defences-as-data-leaks-raise-alarm
Post #4484577
So Korean institutions -- government, private sector, political parties -- treat data breaches the way they should be treated. The latest incident: the Democratic Party of Korea publicly apologized *within 3 days* for a breach exposing data from over 17k members. https://www.youtube.com/shorts/My1ltsiw0jY
Post #4482091
https://www.techmeme.com/260809/p16#a260809p16
Post #4481915
https://www.bybit.com/en/press/post/bybit-sues-north-korea-and-lazarus-group-secures-preliminary-injunction-freezing-stolen-assets-in-landmark-crypto-asset-recovery-effort-bb55bb16f1710f487aa Bybit Sues North Korea and Lazarus Group, Secures Preliminary Injunction Freezing Stolen Assets in Landmark Crypto Asset Recovery Effort
Post #4452524
Each Saturday, Metacurity puts out an infosec long-reads issue that covers pieces we couldn't get to during the crush of breaking news. https://www.metacurity.com/trust-under-pressure-best-infosec-long-reads-8-8-26/ They're all worth reading, but in an unusual move, I want to flag my two favorites. First, Toronto Life's Malcom Johnston proves that the envious couple in the upscale suburb might very well be multi-million-dollar phone scammers. https://torontolife.com/deep-dives/th...
Post #4434017
Australia’s privacy tsar warns new laws may be needed for smart glasses https://www.perthnow.com.au/news/australias-privacy-tsar-warns-new-laws-may-be-needed-for-smart-glasses-c-22691216?mid=1#cid=3658889
Post #4384597
English National Ballet suffers customer data hack https://www.bbc.com/news/articles/cr7km34z112o
Post #4380278
Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds https://www.nextgov.com/cybersecurity/2026/08/chinese-telecom-firms-kept-footholds-us-networks-despite-federal-crackdowns-house-probe-finds/415190/
Post #4378685
So, @Ron_Fabe tells me that on the heels of the Iranian hacking group Mr. Soul's Telegram channel coming back to life, claiming that Iran attacking water facilities is "fake news," the Iranian hacking group Cyb3rAvengers' Telegram channel has sprung back to life too, with the same message.
Post #4377078
Don't miss today's Metacurity for the latest on how Washington is taking giant steps to address AI security, along with other critical infosec developments you should know, including --White House AI testing framework arrives, but key details remain secret, --Congress probes OpenAI incident as calls for stronger AI oversight grow, --China's open AI push fuels geopolitical debate, --Banks press ahead with AI agents, --US eyes China data center tech ban, --Apple renews legal fight...
Post #4374451
Niklas Gruhn coins an excellent new term - meat proxy - for people who blindly copy and paste the output of AI systems to their peers. https://gruhn.me/blog/2026-08-03/ via Simon Willison https://simonwillison.net/2026/Aug/3/dont-be-a-meat-proxy/
Post #4374322
"In recent months, ICE has deployed a round-the-clock digital dragnet to scour the public internet—from Facebook to Instagram to X—for speech that could endanger the agency’s mission." https://www.wsj.com/politics/policy/ice-surveillance-internet-critics-e3b22f49?st=WEdxcA
Post #4374087
Trump administration drafting ban on Chinese data center devices, sources say https://www.reuters.com/world/trump-administration-drafting-ban-chinese-data-center-devices-sources-say-2026-08-04/
Post #4372888
Visa to buy Israeli cyber firm for $2.4 billion to fight AI-driven scams https://www.timesofisrael.com/visa-to-buy-israeli-cyber-firm-for-2-4-billion-to-fight-ai-driven-scams/?mid=1#cid=3650011
Post #4360840
Hugging Face CEO says China is winning the AI race and dominating on open models https://www.cnbc.com/2026/08/03/hugging-face-china-ai-race-open-models.html
Post #4360080
Last night's John Oliver main segment is right up our alley. https://www.youtube.com/watch?v=lnBPhelCdWE
Post #4356634
Check out my latest CSO piece, which delves into why, amid all the AI razzamatazz, plain old cybersecurity fundamentals are more important than ever. Thanks to Eric Brandwine of AWS, Diana Kelley of Noma Security, Gene Spafford of Purdue, Chris Betz of Google Cloud, John Shier of Sophos, Adam Meyers of CrowdStrike, Tony Sager of CIS, Scott Beale of ICS2, and cyber researcher Roger Grimes for their insights. https://www.csoonline.com/article/4204101/ai-is-making-cybersecurity-fundamentals-more-...
Post #4354023
ExfilSquad strikes again. Details of 100,000 police staff leaked on the dark web after hack https://www.thetimes.com/uk/technology-uk/article/police-officer-details-leaked-exfilsquad-hack-rxx5c575b
Post #4352507
"A security weakness in the technology used by most of the nation’s crime labs to analyze DNA evidence exposed 30 years of crime files to the risk of being hacked, according to a group of forensic and computer scientists." https://www.wsj.com/tech/cybersecurity/security-flaw-placed-30-years-of-dna-evidence-at-risk-of-hacking-1932775a?st=zGgyGg&reflink=desktopwebshare_permalink
Post #4352103
@neurovagrant@masto.deoan.org 🎯
Post #4352086
"Partnered Health has obtained an injunction preventing access to the data itself for any purpose." https://www.cyberdaily.au/security/13986-exclusive-partnered-health-responds-to-inc-ransom-data-breach-claims
Post #4352006
“Organizations should assume that public and hospitality network infrastructure might not be trustworthy,” Microsoft warned Friday. https://www.forbes.com/sites/zakdoffman/2026/08/01/microsoft-issues-hotel-wi-fi-warning-for-windows-pc-users/
Post #4351964
"[Northwestern University], which already has a popular AI minor, is adding an AI major. It’s also streamlining prerequisites to make it easier for nonmajors to take an AI or machine learning class." https://apnews.com/article/college-major-ai-computer-science-coding-f0dca8e4f7e16297ad27c2b02adc2530
Post #4351886
"[H]e came across something called “Dynamic Control Platform for Overseas Personnel.” It was a futuristic dashboard — like something from the movie “Minority Report” — that appeared to track foreigners in the northern Chinese city of Zhangjiakou." https://www.nytimes.com/2026/08/02/world/asia/china-surveillance-foreigners-database.html?unlocked_article_code=1.2VA.khtF.stlDJiDcjqVJ&smid=nytcore-ios-share
Post #4351611
That's quite a price advantage. "San Francisco-based Artificial Analysis estimated V4-Flash's average cost at 3 cents per test, compared with 86 cents for Kimi K3 from Chinese rival Moonshot AI, $1.86 for OpenAI's GPT-5.6 Sol and $3.15 for Claude Fable 5." https://www.reuters.com/business/retail-consumer/deepseeks-new-ai-model-is-by-far-cheapest-well-known-models-run-research-firm-2026-08-03/
Post #4351385
"Hackers have illegally accessed and copied data from Liechtenstein's register of beneficial owners, ‌compromising information relating to about 31,000 companies, foundations and trusts, the principality's government said late on Sunday." https://www.reuters.com/world/liechtenstein-says-hackers-access-information-31000-legal-entities-2026-08-03/
Post #4322398
Each week, Metacurity offers our readers a rundown of the top infosec long-reads we couldn't do justice to amid the frenetic crush of daily news. This week's selection covers --The hacker who humbled spyware makers, --China's new AI playbook, --Do AI models really reason? --The hidden danger of side-channel attacks, --Inside Anthropic's legal battle https://www.metacurity.com/power-plays-in-ai-and-cybersecurity-best-infosec-long-reads-8-1-26/
Post #4279967
Wow, before you wrap up for the weekend, don't miss today's Metacurity for the most critical cyber developments you should know, including --Anthropic becomes the second frontier AI lab to disclose agent breaches, --Copilot worm spreads through trusted Word documents, --ExploitGym creators explain how OpenAI's agent escaped, --Coordinated attacks signal a new threat to water utilities, --Critical Azure Cosmos DB flaw threatened thousands of customers, --CrimeStoppers put a bount...