RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

malwaresupply-chain

Quasar Linux implant hunts developer credentials with eBPF rootkit and PAM backdoors

Trend Micro has documented a previously unseen Linux malware kit, Quasar Linux (QLNX), built specifically to compromise developer and DevOps workstations intera

via BleepingComputer ·
policytech-culture

RFK Jr. targets SSRI prescribing with debunked heroin-comparison claims

Health Secretary Robert F. Kennedy Jr. used a Make America Healthy Again Institute event to announce federal initiatives aimed at reducing antidepressant prescr

via Ars Technica ·
cybersecuritysupply-chain

ShinyHunters claims 280M-record theft from Instructure Canvas across 8,800 institutions

The ShinyHunters extortion crew is taking credit for last week's Instructure breach, claiming exfiltration of roughly 280 million records spanning students, tea

via BleepingComputer ·
cybersecurityidentity

ShinyHunters' Vishing Spree Shows Social Engineering Still Beats Tech Defenses

Troy Hunt's latest weekly update zeroes in on ShinyHunters, a loose crew of young threat actors punching well above their weight against major brands. Their acc

via Troy Hunt ·
open-sourceprivacy

Star Labs StarFighter 16: Linux laptop with removable webcam, kill switch, open firmware

Star Labs has unveiled the StarFighter 16, a 16-inch Linux performance laptop targeting privacy-conscious technical users. Configurations span Intel Core Ultra

via Hacker News ·
cybersecurityvulnerability

Taiwan student halts high-speed trains by spoofing 19-year-old TETRA signals

A 23-year-old in Taiwan, identified by his surname Lin, brought four Taiwan High Speed Rail trains to an emergency stop for 48 minutes on April 5 by transmittin

via BleepingComputer ·
aicloud

Thiel-backed Panthalassa raises $140M to float AI data centers on ocean waves

Panthalassa has secured a $140 million round, with backing from Peter Thiel among others, to build wave-powered AI compute nodes deployed in open ocean. The fun

via Ars Technica ·
cybersecuritysupply-chain

Trellix Source Code Leak Renews Alarm Over Security Vendor Supply Chains

Trellix, the XDR vendor born from the McAfee Enterprise and FireEye merger, is dealing with a source code exposure incident that turns one of its own products i

via Dark Reading ·
cybersecurityvulnerability

Unpatched PAN-OS Captive Portal Bug Hits CVSS 9.3, Exploited in the Wild

Palo Alto Networks disclosed CVE-2026-0300, a buffer overflow in the PAN-OS User-ID Authentication Portal (Captive Portal) that lets an unauthenticated attacker

via The Hacker News ·
cybersecuritytech-culture

USB Drop Test Goes Viral: Lessons From a Physical Pen-Test Stunt

A penetration tester's account of a USB drop exercise — scattering rigged thumb drives near a target organization to see which employees would plug them into co

via Dark Reading ·
aidevops

Agent Skills: bolting senior-engineer scaffolding onto AI coding agents

Addy Osmani argues that AI coding agents default to the same failure mode as junior engineers: take the shortest path to 'task complete' and skip the invisible

via Hacker News ·
aisupply-chain

AI lowers the bar: nontechnical attackers now run sophisticated campaigns

A December 2025 arrest in Osaka captures the shift: a 17-year-old with no technical background used AI tools to exfiltrate 7 million records from Japan's larges

via The Hacker News ·