Bite Sized Cyber Crime

Refrigerators are so common in grocery stores and our own homes, and we are used to the occasional power outage resulting in food spoilage, but sometimes something much more targeted occurs. And we don't even know why.

Source: https://www.reuters.com/legal/litigation/investigators-hunt-french-supermarket-fridge-hackers-no-claim-responsibility-2026-10-13/ (pastebin down)

A ransomware recovery firm claimed to have proprietary technology that could decrypt ransomware actor encryption algorithms, which seems too good to be true. As it so turns out, Monster Cloud was paying off the very threat actors that they claimed to be working against.

Sources: https://pastebin.com/2Qq9tS4Z

Members of Killsec ransomware group were arrested across multiple countries, and the one in charge of it all may have been just 16 years old.

Sources: https://pastebin.com/xU2UkHtN

Sort of. A novel attack against RSA algorithms that forges keys rather than finds the prime factors could be a cause for concern, especially with AI enhanced computing capabilities, before we've even hit the quantum era.

Sources: https://pastebin.com/3MhFgcc3

Google becomes the 4th AI tech company to accidentally hack unrelated entities during a security test. But it seems for AI companies that cause real damage there is a lack of accountability for AI models going haywire.

Sources: https://pastebin.com/HrK1tX2A

Real processes, if they are not followed properly, can be a convenient way for threat actors to manipulate employees into wiring over thousands of dollars.

Sources: https://pastebin.com/i5spRdXz

As cars become computers on wheels there are more opportunities for hackers to exploit them to become tools in a larger operation. This is the first time we've seen the exploitation of an aftermarket head unit system, but it won't be the last.

Sources: https://pastebin.com/FdXwZBtt

Is the US establishing their first APT group to address foreign cyber threats? Possibly. Private sector firms can now apply to be essentially cyber privateers.

Sources: https://pastebin.com/VFihFaxH

A recent study of publicly accessible AI models found that patches generated by them fail about half the time, often introducing new vulnerabilities or leaving paths for exploitation open.

Sources: https://pastebin.com/WAq4vT55

Water is a critical infrastructure, and lately multiple water plants across the US are under attack, starting in Minnesota. So far drinking water is safe, but it does bring into question the security of our basic utilities.

Sources: https://pastebin.com/avMEu9zq

Vatican app ClickToPray has had an unpatched IDOR sitting in its website that could allow for scraping the data of every single user.

Sources: https://pastebin.com/SiYDAR40

AI email filters may be worse at detecting old tricks than traditional spam filters as old tactics are being used against old agents to allow in malicious or spam emails.

Sources: https://pastebin.com/Pm7fqAjY

Randomness is not as random as it seems, and this can cause problems, especially when your money relies on it. Some crypto wallets generated predictable random passphrases that can be used to access accounts and steal funds.

Sources: https://pastebin.com/rBsjQY6W

The skill ceiling to become a real ransomware threat actor may have been lowered considerably, as JadePuffer performed an attack as an AI agent with no human intervention, being able to reason its way through problems encountered when deploying ransomware to a target.

Sources: https://pastebin.com/XQFj8LAi

Shopify has a dashboard that integrates all your web order activity, but this has allowed for a new type of phishing scheme much sneakier than emails. Fake receipts with fake support phone numbers have been popping up in many Shop dashboards.

Sources: https://pastebin.com/4HwTfty6

Klue allows you to get the upperhand on your competitors by using their public data and your internal information to create quick sales talking points, however it may have also leaked your private data via a legacy account that was never deleted.

Sources: https://pastebin.com/3jM6RFYB

Fable 5 was based on Mythos, a model so dangerous it could not be released to the general public. But that release did not exactly go smoothly, was complains from customers that is too expensive and restrictive and later an order to shut it down.

Sources: https://pastebin.com/xVAah5bd

AI support bots can help a lot in basic issues, but they can also cause a massive security incident if they are not well understood. Recently Meta AI's account recovery workflow was exploited by hackers to hijack many high profile accounts.

Sources: https://pastebin.com/TCPFaQzG

Charter Communications, a major US telecom provider refused to pay a ransom, and so their data paid the price after being leaked on the dark web.

Sources: https://pastebin.com/3PVNzDLX