On 25 July we published a post about attackers compromising the captive-portal appliances that run guest Wi-Fi at hotels, poisoning DNS at the gateway, and taking Microsoft 365 accounts from travellers who never received a phishing email. The technique description was right. The indicators were right. We named APT28 — Russian military intelligence, the GRU. On 31 July, Microsoft published its own analysis of the same campaign and attributed it to Midnight Blizzard, specifical

The Police National Legal Database confirmed today that names, organisations and work email addresses belonging to UK police officers, police staff, criminal justice professionals and government partners are on a dark web leak site. A crew calling itself ExfilSquad posted samples on 26 July, claiming 135,000 PNLD records alongside roughly 607,000 from the Department for Education. If you read that as a UK policing story you will take the wrong lesson from it. PNLD is one name

If you run N-able N-central, stop reading and go patch to build 2026.3.1.7. It is being exploited right now, Huntress has confirmed it in a customer environment, and the version you are probably on was itself the fix for the last one. That is the useful sentence. The rest of this is about why three different vendors shipped three fixes in six days and not one of them means what the word "fixed" is supposed to mean. The patch that patched the patch N-able disclosed CVE-2026-18

Earlier today we published a post about three coding agents leaking their own credentials to a single prompt injection. In it we said Google's mitigation — adding guardrail prompts to the system prompt — was "asking the vulnerable component to defend itself using the exact channel that was compromised." That was an argument. We should have checked whether anyone had turned it into a number. Somebody had. Tenet Security — Ron Bobrov, Barak Sternberg and Nevo Poran — published

Almost everything written about threat actors is adjectives. Sophisticated. Advanced. Highly capable. None of it is checkable. You cannot falsify "sophisticated," which means you cannot be wrong about it, which means it carries no information. There is one actor claim that is checkable: demonstrated evolution. Two dated observations of the same named actor operating at measurably different tiers. Nobody has to take your word for it, because both endpoints are public and both

Tenable's mid-2026 write-up on CyberAv3ngers contains one line that changes how you should read this group. Alongside the familiar material — IOCONTROL, the water utilities, the joint advisory — they note exploitation of [CVE-2021-22681](https://analytics.dugganusa.com/api/v1/dredd/kev-gap?cve=CVE-2021-22681). That CVE is from 2021. It carries a CVSS of 10.0. And CISA only added it to the Known Exploited Vulnerabilities catalog on 5 March 2026 — five years after disclosure. W

This started with a traffic anomaly, not a threat feed. Somebody was walking our search API one IP address at a time — 185.82.73.162, then .164, then .165, .167, .168, .171, .175 — over about twenty hours, one query each. That is not how a human searches and it is not how a scanner searches. It is how somebody with a list in front of them checks the list. The list turned out to be Iranian OT attack infrastructure. This post is the walk from anomaly to attribution to the parts

We hold that the interesting question about prompt injection is never does it work. It is which agent held. We report that flat in both directions — when one resists, we say so by name; when one folds, same. So here is the flat version. Aonan Guan, with Zhengyu Liu and Gavin Zhong of Johns Hopkins, pointed one class of injection at Anthropic's Claude Code Security Review, Google's Gemini CLI Action, and GitHub's Copilot Agent. None of the three held. All three leaked their ow

Adobe shipped APSB26-114 on 29 July. Two vulnerabilities in Adobe Campaign Classic v7, both fixed in build 9397 → 9398, on Windows and Linux. The headline one is [CVE-2026-48449](https://analytics.dugganusa.com/api/v1/dredd/kev-gap?cve=CVE-2026-48449). Incorrect authorization leading to arbitrary code execution. CVSS 10.0. No authentication. No user interaction. Adobe rated the patch Priority 1 — their highest urgency tier. Its companion, [CVE-2026-48448](https://analytics.du

CISA published ICSA-26-211-04 on 30 July: an out-of-bounds write in Schneider Electric IGSS, tracked as [CVE-2026-12927](https://analytics.dugganusa.com/api/v1/dredd/kev-gap?cve=CVE-2026-12927). Importing a malicious CGF file into the IGSS Definition module can cause data loss or arbitrary code execution. Fixed in 18.0.0.26125. Reported by Schneider Electric and by Michael Heinzl. If that sounds familiar, it should. On 26 July we wrote about four out-of-bounds writes in Rockw

Amgen filed an 8-K on 31 July disclosing that attackers exfiltrated data — including proprietary information and patient protected health information — from multiple cloud systems operated by third-party service providers. Coverage is already reaching for an attribution, because a large biotech losing patient data in the same fortnight that Health-ISAC warned the sector about ShinyHunters is a tempting shape. We are going to resist that, and then explain why the two facts Amg