RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

cybersecurityidentity

Vishing crews ride SSO trust to drain SaaS estates in hours

Two crews tracked as Cordial Spider and Snarky Spider — both active since October 2025 and tied to The Com e-crime scene — are running fast extortion campaigns

via The Hacker News ·
tech-culturedevops

Why Windows still ships with both TMP and TEMP — a 40-year compatibility scar

The dual TMP/TEMP environment variables are a fossil of the CP/M-to-MS-DOS transition. CP/M had no environment variables at all, so programs were configured by

via Hacker News ·
tech-culturedevops

Windows 11 gets a modernized Run dialog that beats the 30-year-old original on speed

Microsoft is testing a redesigned Run dialog in Windows 11 preview build 26300.8346, replacing the Win+R utility that has shipped largely unchanged since Window

via BleepingComputer ·
aivulnerability

AI-Assisted Scan Surfaces 9-Year-Old Bug Lurking in Linux

Another sweep using AI-driven static analysis has flagged a vulnerability that sat undetected in the Linux codebase for nearly a decade. The find continues a pa

via Dark Reading ·
aicybersecurity

Anthropic's Mythos Drop Resets the Clock on AI-Driven Vuln Discovery

Anthropic's Mythos release marks an inflection point for defensive security: an AI system capable of surfacing latent vulnerabilities at machine scale, compress

via Dark Reading ·
cybersecurityai

Bluekit phishing kit ships 40 templates and a multi-model AI drafting panel

Bluekit is a new phishing-as-a-service offering that bundles more than 40 ready-made templates targeting mainstream email providers, iCloud, GitHub, Ledger, and

via BleepingComputer ·
cybersecuritymalware

Brazilian DDoS protection firm's infrastructure powered attacks on rival ISPs

An exposed file archive has tied Huge Networks, a Miami-registered, Brazil-operated DDoS mitigation provider, to a long-running botnet that has battered small B

via Krebs on Security ·
policytech-culture

Chinese EV hype meets US reality: cheap abroad, complicated at home

The Beijing Auto Show is fueling another round of breathless coverage about Chinese EVs running circles around Western automakers on price, range, and software.

via Ars Technica ·
aidevops

Codex CLI 0.128.0 ships /goal — OpenAI's take on the Ralph loop

OpenAI's Codex CLI coding agent gained a /goal command in version 0.128.0 that turns the tool into a self-directed loop. Once a goal is set, Codex keeps iterati

via Simon Willison ·
vulnerabilityopen-source

'Copy Fail' kernel flaw hands root to any local Linux user since 2017

A logic bug in the Linux kernel's algif_aead cryptographic module, introduced by a 2017 in-place optimization commit, lets unprivileged local users write four c

via The Hacker News ·
malwarecybersecurity

DEEP#DOOR Python RAT hides C2 behind bore.pub tunnels, scrapes browser and cloud creds

Securonix has documented DEEP#DOOR, a Python-based backdoor framework delivered through a batch dropper that disables Windows security controls, extracts an emb

via The Hacker News ·
cybersecuritymalware

DOJ sends two cybersecurity insiders to prison for moonlighting as BlackCat affiliates

Two industry practitioners — Ryan Goldberg, an incident response manager at Sygnia, and Kevin Martin of DigitalMint — drew four-year federal sentences for runni

via The Hacker News ·