Search the archive

BARTS HEALTH NHS CONFIRMS CL0P RANSOMWARE BEHIND DATA BREACH

Barts Health NHS Trust confirmed that the Cl0p ransomware group exfiltrated 241 GB of data from invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The breach occurred in August but remained undetected until data surfaced on leak sites in November. Stolen data included patient billing information, former staff salary records, and supplier payment details. Clinical systems remained unaffected. Oracle has since patched the exploited flaw. The incident highlights the continued targeting of healthcare organizations through enterprise software vulnerabilities.

CVE-2025-66516: MAXIMUM-SEVERITY VULNERABILITY IN APACHE TIKA COULD LEAD TO XML EXTERNAL ENTITY INJECTION ATTACK

A newly disclosed XXE vulnerability, CVE-2025-66516, affects several Apache Tika components and allows attackers to embed malicious XFA content in PDFs, potentially exposing sensitive server files or enabling remote code execution. Upgrade all affected Tika modules ASAP.

MALICIOUS VSCODE EXTENSIONS ON MICROSOFT'S REGISTRY DROP INFOSTEALERS

Researchers have discovered two malicious extensions for VSCode that masquerade as a theme and an AI assistant, respectively, to drop infostealers. The extensions run a script that uses curl to download a malicious DLL, which executes as runtime.dll. The infostealers collect running processes, clipboard content, WiFi credentials, system information, screenshots, lists of installed programs, cookies from Chrome and Edge browsers, and cryptocurrency wallet passwords and credentials.

OFFENSIVE SECURITY TAKES CENTER STAGE IN THE AI ERA

CISOs are increasingly adopting comprehensive offensive security programs as AI-enabled threats create more sophisticated attack patterns that traditional scanning cannot detect. OffSec maturity spans from basic vulnerability management through penetration testing to advanced threat hunting and security tool evasion testing. Automation and AI have lowered barriers to implementation. Offensive and defensive programs must work in concert rather than in isolation, with OffSec providing empirical risk validation and data-driven evidence for security investments.

HOW CAN RETAILERS CYBER-PREPARE FOR THE MOST VULNERABLE TIME OF THE YEAR?

Holiday shopping periods create compressed attack windows where bot-driven credential stuffing, account takeover, and automated fraud campaigns intensify against retail systems running at peak capacity with reduced staff. Layered defenses should include adaptive MFA for risky transactions, bot management with device fingerprinting, credential-stuffing detection, and blocking passwords against known breach datasets. Organizations should also test authentication failover procedures and implement strict third-party access controls, as vendor credential compromise remains a primary attack vector.

REACT2SHELL (CVE-2025-55182): DETECTION & MITIGATION GUIDE

React2Shell is a critical remote code execution flaw in React Server Components and related Next.js setups that allows an attacker to send a crafted HTTP request to a server-side function endpoint and execute arbitrary code on the backend. Systems are especially at risk when using React Server Functions with the use server directive or default Next.js App Router configurations, which expose vulnerable endpoints even in otherwise standard apps. The issue affects multiple React server DOM packages and a wide range of Next.js 15 and 16 versions. Fixed versions are already available. Upgrading these components is the primary mitigation.

GUARANTEE AN EXPLOIT-VALIDATED SECURITY FINDING OR YOU DON'T PAY. Watch how they completed a full pentest from launch to compliance-ready and get ready to start your own.

MALCONTENT

malcontent discovers supply-chain compromises through the magic of context, differential analysis, and 14k+ YARA rules.

NDPI

Open Source Deep Packet Inspection Software Toolkit.

RESEMBLE AI (PRODUCT LAUNCH)

Resemble AI builds enterprise voice-AI tools for ultra-realistic voice generation, cloning, and deepfake detection to secure communications and prevent AI-enabled fraud and social engineering attacks in real time.

ANDROID MALWARE FVNCBOT, SEEDSNATCHER, AND CLAYRAT GAIN STRONGER DATA THEFT FEATURES

Researchers disclosed three Android malware families with enhanced capabilities: FvncBot targets Polish banking users with keylogging, web-inject attacks, and hidden VNC; SeedSnatcher steals cryptocurrency wallet seed phrases and 2FA codes via Telegram distribution; and an upgraded ClayRat enables full device takeover through accessibility services abuse. FvncBot uses the apk0day crypting service and session-based installation to bypass Android 13+ restrictions, while ClayRat spreads through 25 phishing domains impersonating YouTube and Russian taxi apps. Organizations should monitor for accessibility service abuse patterns and enforce sideloading restrictions to mitigate these threats.

BLOCK ALL AI BROWSERS FOR THE FORESEEABLE FUTURE: GARTNER

Gartner analysts have urged organizations to block AI-enabled browsers, such as agentic and sidebar-based tools, because they send sensitive browsing data to cloud backends and can autonomously act within logged-in sessions, making them vulnerable to prompt injection, phishing, and credential abuse. They worry staff could automate mandatory tasks such as security training and misconfigure procurement or travel bookings, and have recommended strict risk assessments, tight controls, or outright bans for now.

GOOGLE DETAILS SECURITY MEASURES FOR CHROME'S AGENTIC FEATURES

Chrome's upcoming AI “agentic” features will act on users' behalf to complete tasks such as shopping or filling out forms, while also reducing security risks. It uses separate models to check that planned actions align with user goals and to vet URLs, limits what page data agents can read or modify, and asks for explicit permission before accessing sensitive sites, using passwords, or completing purchases.

24/7 support for critical issues. Try free for 30 days

RANSOMWARE PAYMENTS SURPASSED $4.5 BILLION: US TREASURY

Financial services, manufacturing, and healthcare were the most targeted sectors.

PORTUGAL UPDATES CYBERCRIME LAW TO EXEMPT SECURITY RESEARCHERS

Portugal established a legal safe harbor for good-faith security researchers who identify and responsibly disclose vulnerabilities without seeking economic benefit, provided they report findings to system owners and the national cybersecurity authority within strict guidelines.

Create a free account

GEN Z DOESN'T CARE ABOUT YOUR BRAND HERITAGE

Gen Z largely ignores traditional marketing. Brand prestige, polished ads, and big launch events have little impact. They prefer serialized content like “day 47 with this phone” over one-off campaigns. More than 80% of their purchase discussions happen in private DMs and group chats, so brands cannot track them. They trust creators more than brands or legacy media, and that trust now carries into offline meet-ups and hands-on events.

DIGITAL WALLET USE OUTPACES REGULATORS

Digital wallets have become a primary payment tool as usage surges and regulation lags. About 77% of Americans used a top wallet in the past year, and global adoption is projected to hit 6B users by 2029. Monthly mobile payments in the US jumped from 4 in 2018 to 11 last year, showing a clear shift toward phone-based transactions. Regulators are scrambling to adapt, creating tension between rapid innovation, dense but uneven oversight, and growing consumer reliance on wallet ecosystems.

LET'S TALK REENGAGEMENT

Re-engagement campaigns are a targeted fix for deliverability issues, not an ongoing list-shrinking tactic. They help identify abandoned inboxes, spam folder recipients, and true spam traps, which all show little or no measurable activity. Engagement signals vary across mailbox providers, and many users read email in untrackable ways, so senders need to be clear about their goals and selective about who enters a re-engagement flow. The priority is removing risky addresses rather than penalizing real subscribers who appear inactive due to image blocking or limited tracking. Re-engagement should only run when there is a concrete deliverability problem, since it always removes some legitimate users.

WHY BLOGGING WILL BE HUGE IN 2026

Blogging remains a powerful tool because AI relies on human expertise and credible content. Generic SEO content has lost trust, creating opportunities for practitioner-led blogs that drive direct search traffic and support broader business ecosystems. Strong blogs share real experiences and lessons, build an audience before publishing, and repurpose content across multiple platforms. Monetization comes through consulting, courses, software, and communities rather than display ads. The goal is to become a trusted destination that audiences actively seek out by name.

spot.

NOTES ON GOOGLE ADS NEW STRATEGY TOOL

Investment Strategy in Google Ads gives advertisers a fast way to see the 7-day performance impact of budget changes across all campaigns in one view. It centralizes projections at the account level and shows how removing budget limits could affect conversions, conversion value, or clicks. It is useful for short term periods such as Cyber Week, while Performance Planner remains better for longer planning horizons of up to one year. It still lacks fields for tCPA and tROAS, so advertisers should review its recommendations carefully and monitor outcomes.

INTRODUCING SOCIAL CHANNELS IN SEARCH CONSOLE

Google is testing a new Search Console feature that gives site owners a unified view of Search performance for both their websites and connected social channels. The update expands Search Console Insights to show clicks, impressions, top pages, top queries, and audience locations for supported social channels. It also surfaces additional traffic sources such as Image Search, Video Search, News Search, and Discover. The feature is available only to a limited group of sites that Search Console identifies automatically.

INSTAGRAM IS TESTING A NEW FEATURE THAT LETS CREATORS SHARE EARLY ACCESS TO THEIR REELS WITH FOLLOWERS

A new feature in testing, Early Access Reels, lets creators restrict content to followers for 24 hours. Non-followers see a teaser with a countdown and a prompt to follow. This model incentivizes immediate engagement and builds loyalty by giving followers first-look privileges. Unlike Trial Reels, which exposed content to wider audiences first, Early Access rewards community-building and exclusivity.

HOW DO PEOPLE USE AI ASSISTANTS?

Most AI sessions are short and transactional. The median conversation has 2 turns, and over 80% of sessions stay under 1,000 words. Assistants generate about 60% of all content and produce roughly 1.5x more words than users. Only 35% of sessions show any commercial intent, and the largest share of those are early awareness (10%), while 65% of all sessions fall outside the commercial funnel and focus on tasks like brainstorming (7.7%) and planning (6.5%). A small group of long and complex sessions over 2,500 words accounts for only 4.2% of the total but represents the highest value use cases.

WHY THE FUTURE OF MARKETING BELONGS TO CREATIVES WHO THINK LIKE CODERS

Campaigns today operate as adaptive systems rather than single static ideas. AI has turned every consumer interaction into a dynamic input. The most effective creative professionals now approach campaign building with a developer mindset. They test, release, and improve quickly. This means replacing the traditional push for perfection with fast iteration and structured learning. Coders break and rebuild continuously, a behavior now essential for campaign success.

7 MARKETING PREDICTIONS FOR 2026

AI will push ads to get more creative, marketers to get more technical, and headcount to shrink.

5 TACTICS TO INCREASE LIVE EVENT REGISTRATIONS

Tips include giving out door prizes and asking people to comment with speaker questions on LI posts.

You don't want to miss this! Register for the webinar

BUILDING IN PUBLIC IS SCARY. DO IT ANYWAY

Polished, infrequent launches slow digital teams down, while building in public creates momentum and trust through steady shipping and open communication. The approach works when builders share updates often and stay focused on real user needs.

NETFLIX AND THE HOLLYWOOD END GAME

Netflix's rise shows that Internet distribution, not content, holds the real power. Buying Warner Bros. is a bid to own the IP it boosts. Netflix's biggest threat now is YouTube and the surge of user-generated content competing for attention.

WHY LABELING RELATIONSHIPS IS SO IMPORTANT

Companies default to tidy hierarchies, but real operating systems behave like complex networks. When you map the real relationships, you uncover how strategy and execution actually work.

WHY YOUR MARKETING ISN'T WORKING

The insights explore weak marketing engines, the rising PMF treadmill, shifting SaaS exits, and how OpenAI might scale its revenue.

possible

THE CINDERELLA “GLASS SLIPPER” EFFECT

A few AI models achieve instant, lasting retention by perfectly solving a high-value workload for early users, creating a “Glass Slipper” cohort that never leaves. This raises the stakes on launches: teams must deliver a real capability breakthrough, because the first perfect fit wins.

BUILDING PRODUCTS FROM ZERO: WHAT REALLY MATTERS WHEN YOU'RE THE FIRST PM

Listen early, define principles, move fast, and trust qualitative insight before metrics settle. Staying close to customers and documenting choices builds a solid product foundation that can grow with the company.

THIS IS HOW TO FIND MEANING IN LIFE: 6 SECRETS FROM RESEARCH

Meaning is something we build through values, connection, awe, work, and the stories we craft about our lives. It appears when we show up consistently, even when life feels ordinary or hard.

THE PROBLEM WITH PRODUCT REVIEWS

Product reviews often focus on small fixes instead of clarifying whether the problem matters or the product can succeed. Companies equate speed with coding quickly, so reviews become checkpoints instead of sources of real insight.

(PDF)

CAN WE DRIVE THE SAME OUTCOME FOR DIFFERENT CUSTOMER SEGMENTS?

Repeat outcomes when doing so reveals whether segments need different solutions or metrics, because one shared statement often hides real differences.

WHY AI MAKES EXPERTS MORE VALUABLE THAN EVER

AI gives the most leverage to people who already know their field well and can guide and correct its output.