Blog

The AI Threat Window Is Open. Security Leaders at RSAC Are Saying So Out Loud.

John Z Black Mar 28, 2026

AI Security #ai #rsac #rsac2026 #langchain #langgraph #openai #vulnerability #enterprise #mandia #stamos

Kevin Mandia called the next two years a 'perfect storm for offense' at RSAC 2026, and the evidence landed the same week.

Iran Is Running Every Cyberattack at Once

John Z Black Mar 28, 2026

Threat Intelligence #iran #unit42 #apt #wiper #handala #stryker #nation-state #bearlyfy #geopolitics #cyber-warfare

Iran isn't running a cyber campaign right now. It's running all of them simultaneously, and Unit 42's latest brief documents exactly that.

GitHub Is Becoming a Minefield for Developers. Most of Them Have No Idea.

John Z Black Mar 28, 2026

Threat Intelligence #github #supply-chain #developers #vscode #open-vsx #fake-stars #malware #devsecops

Three simultaneous attacks on GitHub's trust signals -- fake stars, weaponized security alerts, and a scanning bug that let 72 malicious extensions slip through -- show the reputation infrastructure developers rely on is broken.

Europe's Week: Fining Musk's AI, Rejecting Surveillance Powers, and Getting Hacked

John Z Black Mar 28, 2026

Policy, Law & Governance #eu #xai #grok #csam #european-commission #dutch-police #privacy #ai-regulation #breach #netherlands

In 48 hours, Europe fined xAI's Grok, voted to let CSAM scanning expire, had its Commission cloud breached, and watched its police force get phished.

So Bad That German Police Knocked on Doors: The PTC Windchill Flaw Now in CISA's KEV

John Z Black Mar 28, 2026

Vulnerabilities & Patching #cisa #ptc #windchill #kev #industrial #ics #manufacturing #rce #bsi #critical-infrastructure

A critical RCE flaw in PTC Windchill hit CISA's KEV with no patch available yet, and German police started showing up at factory doors in person to warn companies.

China's BPFDoor Got an Upgrade. Passive Defenses Still Can't See It.

John Z Black Mar 28, 2026

Threat Intelligence #bpfdoor #china #red-menshen #telecom #apt #nation-state #threat-hunting #backdoor

Red Menshen's upgraded BPFDoor backdoor now hides even better inside telecom backbone networks, and the only way to find it is active threat hunting that most carriers aren't doing.