Blog

BlackSanta Kills Your EDR Before You Even Know You're Hit — and It's Coming Through HR

John Z Black Mar 11, 2026

Malware #malware #edr #endpoint-security #phishing #hr-security #blacksanta

New malware called BlackSanta disables your endpoint detection, and it's getting in through HR inboxes. That combo is nastier than it sounds.

When 'No' Means Nothing: Privacy Erosion from DHS Surveillance to Duolingo Tracking

John Z Black Mar 11, 2026

Privacy #privacy #surveillance #dhs #duolingo #bytedance #gdpr #tracking

DHS fired the privacy officers who questioned surveillance orders. Duolingo keeps sending your data to ByteDance after you opt out. Your 'no' doesn't work when nobody's enforcing it.

The War Near Iran Is Breaking Your Apps: GPS Jamming, Cyber Escalation, and Civilian Collateral

John Z Black Mar 11, 2026

Geopolitical Security #iran #gps-jamming #electronic-warfare #cyber-escalation #critical-infrastructure #geopolitics

GPS jamming near Iran is wrecking delivery and navigation apps across the region. Unit 42 warns of escalating Iranian cyber risk. Modern conflict has a civilian tech blast radius.

APT28's Covenant Trick and North Korea's AirDrop Hack: How Nation-States Borrow Their Tools

John Z Black Mar 11, 2026

Threat Intelligence #apt28 #north-korea #nation-state #covenant #airdrop #threat-intelligence

Russia's APT28 hijacked an open-source red-team tool to hit Ukraine. North Korea's UNC4899 used Apple AirDrop to break into a crypto firm. Both attacks exploit the trust we put in legit software.

AI Agents Have an Infrastructure Problem — and Researchers Just Proved It

John Z Black Mar 11, 2026

AI Security #ai-security #mcp #red-team #llm #privacy #ai-agents

MCP protocol flaws, a 38-researcher red team exercise, and LLM-powered deanonymization all landed the same week. AI agent security isn't a future problem. It's a right now problem.

The Edge Is the Front Line: FortiGate, ASUS Routers, and the War on Network Perimeters

John Z Black Mar 11, 2026

Threat Intelligence #fortigate #asus #botnet #edge-devices #network-security #kadnap

Enterprise firewalls and consumer routers are getting hammered. FortiGate credential theft and the KadNap botnet show the same failure at the network edge.