Information security, breaches, and defence.
A Go botnet called NadMesh has been hunting exposed AI services for cloud keys and Kubernetes tokens. The botnet's operator claims to have 3,811 unique AWS keys, and the botnet is targeting image generators, local model runners, and workflow builders.
Why it matters
The NadMesh botnet is a significant threat to exposed AI services and cloud keys, and its operator's claims of having 3,811 unique AWS keys are a cause for concern. The botnet's targeting of image generators, local model runners, and workflow builders also raises concerns about the security of these services.
A Chinese cybercrime group, GoldenEyeDog, has been linked to a DigiCert security incident in April 2026. The group used malware to access a support member's device at DigiCert, a code-signing certificate provider, and stole certificates intended for DigiCert customers.
North Korean hackers are using fake job postings and coding challenges to steal developer credentials and cryptocurrency wallets. They are hiding malware in SVG flag images to sidestep detection.
The European Commission has ordered Google to give rival AI assistants the same access to Android features as Gemini, including the camera, microphone, and screen. Google must implement this change in the next major release of Android, Android 18, and by August 2027 at the latest.
The article discusses the growing importance of autonomous military capabilities and the need for a trusted information infrastructure to support them. It highlights the challenges of building such an infrastructure and the opportunities for innovation and collaboration.
Updated as new stories ingest
Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. The breach may have exposed client tax information.
Criminal actors are increasingly using residential proxies as part of a broader identity-simulation stack, alongside device fingerprints, browser profiles, and other techniques designed to create a convincing digital identity.
The Brief
Editorially curated. No noise. Unsubscribe in one click.