Cyber Security Aug 10, 2026
Your No-Reply Address May Belong to Someone Else
Researchers bought noreply.net and deleteduser.com. One domain has taken 400,000 messages in 18 months, 28,365 of them carrying attachments nobody meant to send.
Intelligence Archives
· Page 2/27
Field Intelligence.
Declassified operational reports, psychological protocols, and technical breakdowns. These are field-tested mechanics for securing the perimeter and the mind.
[!] NO CORRESPONDING RECORDS FOUND IN ARCHIVE.
Cyber Security Aug 8, 2026
Incomplete Patches: What to Do When the Fix Does Not Hold
N-able has shipped three rounds of N-central fixes in nine days, and attackers got further after each one. Patching is not the same as being clear.
Psychology Aug 7, 2026
Vishing Hits the Phone Your Policy Doesn't Cover
UNC6671 calls employees on their personal mobiles pretending to be the help desk. Your controls do not reach that phone, and your workflow taught people to answer it.
Cyber Security Aug 6, 2026
Exposed PLCs: The Attack Was Just Setting a Password
Forescout counted 4,407 Rockwell controllers on the public internet. The attackers who hit US water utilities did not exploit a flaw. They logged in and set a password.
Physical Security Aug 5, 2026
Your Data Handling Is a Physical Security Control
The Met served a stalking suspect his victim's new address because nobody checked a redaction. Your records hold addresses whose secrecy is somebody's physical safety.
Cyber Security Aug 4, 2026
RMM Abuse: When the Remote Access Tool Is the Intrusion
Attackers stopped writing malware and started installing ScreenConnect. It is signed, allowlisted, and invisible to the stack you bought to catch intruders.
Cyber Security Aug 3, 2026
Passkeys Stop Phishing. They Do Not Stop Malware.
Unit 42 signed into passkey-protected accounts with no fingerprint, no PIN, and nothing on the victim's screen. Passkeys ended phishing, not endpoint compromise.
Cyber Security Aug 2, 2026
Prompt Injection in Word Docs: The Template That Spreads Itself
A researcher hid instructions in a Word file as white text. Copilot read them, obeyed them, and wrote them into the next document. Your template library is the vector.
Cyber Security Aug 1, 2026
Hotel Wi-Fi Security: You Have to Trust the Attacker's Network
Russian actors are compromising hotel captive portals to push fake update prompts and steal tokens from business travelers. The page you cannot skip is the attack.
Psychology Jul 31, 2026
The Login Page Your People Were Trained Not to Read
A Russian group is compromising real hotel sign-in portals to reach travelers. The attack works because clicking through a captive portal is a habit every organization spent years building into its staff.
Cyber Security Jul 30, 2026
You Rotated the Credentials. They're Still In.
Russian actors are exploiting an Outlook Web Access flaw to keep mailbox access after victims reset passwords. Password rotation is step one of a response, and it has never been the same thing as eviction.
Cyber Security Jul 29, 2026
Why They Went After the Small Water Systems
More than 30 Minnesota water utilities were hit at once and a plant went offline. The targeting was not random. It followed the gap between how much a system matters and how much defense it can afford.