TechPulse USA

Update, Oct. 19: Since publication, the defenders' playbook has crystallized: Australia's Cyber Security Centre guidance (July 2026) tells medium businesses hackers now use AI to "rapidly discover and exploit vulnerabilities" in internet-facing services and "target many victims at once" — its immediate actions are patch internet-facing services and remove ones that are no longer necessary (ASD's ACSC). Separately, Resecurity's agentic-threat write-up warns that unpatched RCEs, path traversals and default credentials are "catnip for AI agents" and advises detecting agentic behavior — rapid sequential requests, self-correcting retries — instead of relying on signatures (Resecurity). The Cairn campaign is the live proof of both documents' warnings. The break-in cost less than a dinner for two. A Chinese-speaking hacker broke into the websites of more than 100 companies — including farm equipment giant Deere, appliance maker SharkNinja a...

The FBI and Dutch police announced Tuesday that they have arrested a man the FBI describes as one of the "alleged leaders" of ShinyHunters, the cyber-extortion gang that claimed responsibility for breaching the FBI's own systems earlier this month. In a twist that has stunned the cybersecurity world, Dutch investigators say a search of the suspect's laptop turned up information about two planned murders abroad — a second, separate criminal investigation that has nothing to do with the hacking probe. The arrest marks the most significant law enforcement action yet against a group that U.S. and Dutch authorities blame for hacks at more than 140 organizations worldwide — including Ticketmaster, AT&T, Pornhub, and Dutch telecom provider Odido. It also lands just days after ShinyHunters said it stole terabytes of personal data belonging to "mostly all" FBI agents and job applicants from the bureau's careers website, a breach the FBI declared a "cyb...

Update, Sept. 18: A Flock spokesperson called the camera's unauthorized removal 'illegal' and said the company received no vulnerability report and has 'not enough detail to assess the claims' (via 404 Media); the stegan0gram collective says it will publish its teardown methodology so others can replicate it; the backlash keeps growing, with 50+ agencies and communities canceling, suspending or rejecting Flock contracts since the start of 2026 (IPM News, Aug. 17). Somebody finally did what Flock Safety insisted couldn't be done. Not from a laptop in another country — from a ladder, on a roadside, in plain daylight. A group of hackers calling themselves stegan0gram tore a Flock license-plate camera down from above a roadway, made a near-complete copy of everything stored inside it, and pulled out the one thing that was supposed to make all of this impossible: the encryption key. They handed the files to 404 Media and the transparency nonprofit Distributed Denia...