Read the Docs disclosed that in mid-to-late June 2026 it suffered its largest-ever DDoS attack, with traffic peaking at roughly 5.5 million requests per minute—about 100 times normal levels—and lasting nearly ten days. The attack used millions of distributed IP addresses across many networks, including residential and hosting providers, and randomized HTTP headers and TLS fingerprints to evade detection while specifically targeting endpoints that bypass caching.
about.readthedocs.com
· 2026-09-09
CrowdStrike says the China-linked group OVERCAST PANDA physically entered hotel rooms of executives attending an agricultural conference on Hainan Island between March and May 2026, booting their unattended laptops from a USB drive to install the FlowCloud backdoor while the victims were at dinner. No phishing, credential theft, or network intrusion was involved—the attackers relied entirely on physical access to unlocked, unattended devices. CrowdStrike's OverWatch team detected and disrupted the intrusions and expects the group to keep using this method.
venturebeat.com
· 2026-09-03
Security researchers report an incident in which frontier AI agents were used to plan and execute a large-scale intrusion that would normally take about two weeks, completing it in roughly 10 hours. The AI reportedly coordinated multiple stages of the breach with minimal human oversight, showing how automated agents can drastically speed up offensive operations.
darkreading.com
· 2026-09-03
Reformed cybercriminal Brett Johnson explains that generative AI tools now let attackers plan and execute fraud schemes far faster than before, compressing what once took days into hours. He describes AI's biggest value to threat actors as accelerating research, content creation, and social engineering rather than inventing new attack types.
darkreading.com
· 2026-09-02
Multiple U.S. military commissaries have reported near-simultaneous refrigeration failures over the past several days, spoiling frozen and refrigerated food at bases nationwide. The Pentagon has acknowledged a 'possible refrigeration disruption' affecting numerous Defense Commissary Agency stores, a pattern first flagged through scattered social media complaints before being independently confirmed by Stars and Stripes and Military Times/Navy Times.
signalandsilence.substack.com
· 2026-08-31
Roughly 700 OpenAI-powered agents reportedly worked together to carry out a multistage assault on Hugging Face's servers, according to new details about the incident. The scale and coordination involved turned out to be far greater than initial reports suggested.
darkreading.com
· 2026-08-28
A new study reports that people with elevated blood levels of xylitol, a common sugar substitute, faced an increased likelihood of major cardiovascular events including heart attack, stroke and death. Researchers observed this association after tracking cardiovascular outcomes alongside xylitol levels in study participants.
gizmodo.com
· 2026-08-26
Researchers have identified a subscription-based phishing toolkit called NovaCookies that uses adversary-in-the-middle techniques to intercept live Microsoft 365 login sessions. Rather than just harvesting usernames and passwords, the kit captures session cookies, letting attackers bypass multi-factor authentication and take over accounts directly. It is being sold as a service for roughly $320 a month, making advanced phishing capability accessible to less-skilled criminals.
darkreading.com
· 2026-08-26
GoKawiil