DeadLock ransomware leans on blockchain chat to survive
Microsoft Threat Intelligence has published a technical breakdown of DeadLock, an emerging financially motivated ransomware operation distinguished by its use of decentralized infrastructure for victim communications and data leak operations.DeadLock surfaced in July 2025 and runs a double-extortion playbook, encrypting victim systems while threatening to dump stolen data. By July…
The Latest
Sting startup hired three suspected Pyongyang IT workers
Sting startup hired three suspected Pyongyang IT workers.
Split instructions sneak secrets past AI coding assistants
Split instructions sneak secrets past AI coding assistants.
Emulated USB gadgets turn Windows PnP into SYSTEM access
Emulated USB gadgets turn Windows PnP into SYSTEM access.
China-linked crew drops StormEncryptor after N-central raids
China-linked crew drops StormEncryptor after N-central raids.
Poisoned JSON stream plants rogue admins in WordPress shops
Poisoned JSON stream plants rogue admins in WordPress shops.
Kimsuky runs local AI models to sharpen phishing lures
Kimsuky runs local AI models to sharpen phishing lures.
OpenAI’s GPT-5.6-Cyber answers most risky security requests
OpenAI's GPT-5.6-Cyber answers most risky security requests.
Private cellular link let attackers stop a Polish plant turbine
Private cellular link let attackers stop a Polish plant turbine.
US and South Korea warn of Gunra raids on critical sectors
US and South Korea warn of Gunra raids on critical sectors.
Fresh GPG key now signs Firefox and Thunderbird Linux builds
Anyone who verifies Firefox and Thunderbird downloads by hand now has extra homework: Mozilla has retired the GPG subkey behind its Linux releases after an unencrypted copy was accidentally committed to a private company repository.The affected subkey signed Linux tarballs, RPM packages, and checksum files for both products. That key is what lets a user, or a distro bundling the…
SIM card commands turn phones and EV chargers into pawns
SIM card commands turn phones and EV chargers into pawns.
Surtr Defense builds a hardware-agnostic OS for drone defense
Surtr Defense, an RVII portfolio company, builds a hardware-agnostic operating system for counter-drone operations.
Didit builds identity verification and fraud infrastructure
Didit, backed by Robinhood Ventures Fund II, builds identity verification and fraud infrastructure for the financial stack.
Spotlight
Silmaril Security locks down self-improving AI runtimes
Silmaril Security, an RVII portfolio company, builds runtime security for self-improving AI systems that outpace signature-based defenses.
Security and defense startups in Robinhood Ventures Fund II
Robinhood Ventures Fund II lists Aug 13 on the NYSE as RVII with a security cohort spanning digital identity, AI runtime protection, and counter-drone defense.
OpenAI pauses Astra work after critical cyber risk flag
OpenAI halted internal work on its upcoming Astra model after evaluations suggested it could reach the critical cyber capability threshold.
Head Mare swaps TrueConf installers for PhantomCore backdoor
Kaspersky says the Head Mare group exploited a two-flaw chain in unpatched TrueConf servers to poison client installers with the PhantomCore RAT.
Features
AI research rig finds Apache zero-day plus new desync tricks
PortSwigger's HTTP Terminator generated and proved new HTTP desynchronization techniques and helped expose a patched Apache Traffic Server zero-day.
Poisoned logs turn trusted platforms into agent hijackers
Tenet Security's Ghostjacking demo shows attackers planting instructions in logs that AI agents read and execute, targeting Cloudflare, Datadog, and…
Levi Strauss says social engineering raid stole corporate files
The denim maker told the SEC that a social engineering attack hit three employee computers and led to exfiltration of…
Belgian eID add-on flaws let sites forge legal signatures
A researcher found the Connective browser extension used by two million Belgians could be abused to read card data, steal…
Defense supplier IEH exposes export-controlled data in phishing hit
IEH Corporation told the SEC that a phished employee's Microsoft 365 mailbox exposed engineering files and potentially export-controlled technical data.
Port gate outage in North Carolina draws federal cyber probe
A cyberattack forced all three North Carolina port facilities to delay gate openings and shift to manual processing, with the…
