Security Operations
Detection, incident response, forensics and the tooling behind them.
The $3 Million Frontend Heist That Proves Prediction Markets Aren't as Safe as They Look
Hackers exploited a third-party vendor dependency to inject malicious JavaScript into Polymarket's frontend, tricking users into approving fraudulent transactions and stealing $3M in ParyonUSD tokens — with the platform pledging full reimbursement despite no backend compromise.
Wired for Alarm: Aligning Evolutionary Biology and Modern Democracy
We're wired for immediate threats, not 24/7 digital chaos. Understanding why our brains keep flagging red alerts—and how we can override those defaults—is the only way to actually improve our democracy.
Aflac’s Japan Breach Exposed 4.38 Million Customers — And It’s Not the First Time
Aflac Japan’s systems were breached between June 15–25, 2026, exposing personal and bank data for over four million policyholders — a chilling repeat of last year’s incident.
When the Internet Stopped Being a Library: How AI Slop and Paywalls Are Erasing Our Collective Knowledge
The early internet promised universal access to knowledge. Today, AI-generated misinformation and paywalls are drowning reliable information — and our reliance on cognitive offloading means we may not even notice until it’s too late.
Homeland Security Network Breach Exposes Sensitive Regional Coordination During World Cup Planning
The Department of Homeland Security is investigating a cyber intrusion targeting the unclassified Homeland Security Information Network (HSIN) and its SharePoint collaboration system between late May and early June 2026. The breach, attributed to an unidentified threat actor, raised concerns about exposure of World Cup security plans while classified systems remain unaffected.
Poland dismantles SIM-swapping syndicate breaching telecom partners to steal millions in crypto
Poland's CBZC, backed by FBI and HSI, arrested four cybercriminals who compromised telecom infrastructure partners to clone SIM cards, hijack SMS 2FA, and drain cryptocurrency accounts — laundering over $5 million through a distributed financial network.
OAuth Token Abuse in Klue Integration Led to Salesforce CRM Data Theft by Icarus Group
Attackers exploited a legacy Klue integration credential to generate OAuth tokens, then used Python scripts to extract CRM data from customer Salesforce instances over 24 hours, targeting cybersecurity firms including Huntress and Tanium.
Securing the AI Perimeter: The Hidden Danger of Unprotected Endpoints
Explore the critical security gap where unsecured, publicly accessible AI model endpoints become vectors for hijack and operational misuse.
The High Cost of a Single Leaked Developer Token
The recent Novo Nordisk breach demonstrates how easily a single overlooked GitHub access token can compromise an organization’s entire development pipeline and data integrity.
Europe's Oldest Human Rights Body Confronts Massive ShinyHunters Payroll Breach Claim
ShinyHunters claims to have stolen over 429,000 HR and payroll documents from the Council of Europe and demands payment before publishing on 16 June 2026. The Council confirms it is investigating the breach.
Beyond the Integration: Examining the Salesforce Data Breach via Klue
Market intelligence platform Klue fell victim to a supply chain attack in June 2026, where threat actors exploited a legacy credential to steal OAuth tokens, enabling unauthorized access and data exfiltration from customer Salesforce environments.
GitHub Breach Exposes 4,000 Internal Repositories: What We Know
An attacker breached GitHub infrastructures, exfiltrating 4,000 internal repositories, with claims that they are focused on selling the data rather than extortion.