Threats

OpenAI disrupted a coordinated distillation campaign attempting to illicitly extract protected reasoning from its AI models, attributing core activity to Moonsh

DPRK-linked attackers are distributing Go-based malware via Terraform providers and Go modules, marking a novel supply chain distribution vector.

ShinyHunters breached rival ransomware gang Cl0p and threatened to expose victim data. Organizations that paid Cl0p may now face renewed extortion risks.

Anthropic's security document reveals Claude still struggles with CAPTCHAs, while unverified reports claim GPT-6 Astra solved all 48 levels of a CAPTCHA game.

A September 23 webinar from BleepingComputer and Material Security examines real Google Workspace breaches and the response decisions that shaped their outcomes

Microsoft's September patch fixes a record 972 vulnerabilities, 112 of them critical. AI-powered vulnerability discovery is driving the surge.

Schneier's DEF CON talk on AI hacking drew over 100K YouTube views. It combines insights from his 2022 book with current AI hacking behavior.

A new cPanel flaw lets an authenticated hosting account achieve root-level code execution via SQL injection in EmailTrack. All supported versions are affected.

A new Shai-Hulud variant scans 469 locations for developer credentials, up from 189. Securing the credential layer is now the core supply chain defense priority

Novocure disclosed a mid-August cyberattack exposing over 1,400 U.S. patient records and employee contact data. No medical devices were accessed.

Intel, Nvidia, and IBM are embedding post-quantum cryptography into hardware. Enterprises are urged to act now against harvest-now, decrypt-later attacks.

Bruce Schneier has several public speaking engagements scheduled for fall 2026, spanning security conferences, festivals, and civic events across North America.