Espresso

Sign in Subscribe

Cybersecurity

96% Iran Internet Blackout After US‑Israeli Jets Strike: $780M Loss

96% Iran Internet Blackout After US‑Israeli Jets Strike: $780M Loss

96% of Iran's net vanished in hours 🌐—digital ghost town as US-Israeli jets strike. 149 M offline, $780 M lost, VPN demand up 579%. The regime's 'security' costs ordinary folks everything. Who's next when a country can be switched off with a

VB6 Malware Beats $100K EDR: Legacy Code Is Now 'Advanced Evasion'

VB6 Malware Beats $100K EDR: Legacy Code Is Now 'Advanced Evasion'

TL;DR * DarkCloud infostealer malware targets enterprise credentials via browsers and email clients, marketed as surveillance software with VB6-based evasion * ResidentBat malware targets Belarusian authorities with C2 infrastructure in Netherlands, Germany, and Switzerland, using port range 7000-7257 * iOS 26 and iPadOS 26 Certified by BSI for NATO Classified Networks, First

💣 581 CVEs Per Codebase: Global Supply Chain Security Collapses as Two-Thirds of Enterprises Face Active Compromise

💣 581 CVEs Per Codebase: Global Supply Chain Security Collapses as Two-Thirds of Enterprises Face Active Compromise

TL;DR * Open source dependency vulnerabilities double: median CVEs per codebase rises from 280 to 581, 65% suffer supply chain attacks * Cortex XDR Live Terminal vulnerability (CVE-2026-0323-2400) allows cross-tenant C2 redirection via WebSocket hijack * Remington.bg breached, exposing 150,000+ customer and order records in Bulgaria cyber incident 💣 581 CVEs

Medusa Ransomware: North Korea's $15M Hospital Shakedown

Medusa Ransomware: North Korea's $15M Hospital Shakedown

TL;DR * Lazarus Group deploys Medusa ransomware against U.S. healthcare and Middle East targets, leveraging Blindingcan and ChromeStealer * ShinyHunters breach CarGurus, compromising 12.6 million accounts with personal data including addresses and phone numbers * CISA mandates federal agencies to inventory and decommission unsupported edge devices within 90 days under

$9M Breach: AI Script Kiddies Weaponize Default FortiGate Passwords in Enterprise Slaughter

$9M Breach: AI Script Kiddies Weaponize Default FortiGate Passwords in Enterprise Slaughter

TL;DR * Hellcat group exfiltrated 44GB of sensitive data from Ascom’s ticketing system via AI-compromised FortiGate devices * Let’s Encrypt adopts DNS-PERSIST-01 for wildcard certificate issuance with reusable validation records * Google Blocks 255,000 Apps from Play Store in 2025 for Excessive Sensitive Data Access, Bans 80,000 Developer

64,000% ROI: AI Phishing Factory Nets $40M on $62K Cloud Spend

TL;DR * RedVDS AI-powered fraud infrastructure dismantled by Microsoft DCU, disrupting 2,600 VMs sending 1M phishing emails daily * DynoWiper malware linked to Russian APT Sandworm targeted Polish energy infrastructure in late December 2025 * Microsoft Copilot AI summarized confidential emails despite DLP policies, bug CW1226324 active since January 21, 2026