October 23, 2026 Sometimes a cybersecurity story develops so quickly that it’s difficult to understand just how serious the situation has become. This week, we…
Leave a CommentAuthor: tech
I'm the main owner of this blog and podcast site.
Sometimes I wonder whether the people sending unsolicited website offers actually visit the sites they want to redesign. On October 16, 2026, I received another…
Leave a CommentBack in 2013, Target suffered a massive breach. In 2024, I asked why traffic-light controllers were accessible over the Internet. Now, in October 2026, we…
1 CommentWe’ve been spending a lot of time discussing artificial intelligence on The Security Box lately. Sometimes we’re talking about useful tools. Sometimes we’re talking about…
Leave a CommentSometimes you read a cybersecurity story and wonder whether somebody is deliberately trying to win the Stupid Fuck Award. Well, thanks to the October 13,…
Leave a CommentBack in January 2025, I wrote about accessiBe and the claim that an automated accessibility product could make websites accessible. I was not impressed then,…
Leave a CommentA domain name that developers have treated like a harmless placeholder for years is now being used to deliver a ClickFix attack. According to BleepingComputer,…
Leave a CommentAn experimental OpenAI model was given what sounds like a routine research assignment: find publicly available information about government spending on medicines for skin conditions…
Leave a CommentWe spend a lot of time talking about ransomware and extortion groups attacking companies, stealing data and demanding money. But every once in a while,…
Leave a CommentResearchers at cyber risk management company UpGuard have found more than 16,000 Supabase databases exposing readable tables, with personally identifiable information showing up in more…
Leave a CommentThreat actors have found another way to turn a legitimate online service into part of a malware delivery chain. This time, they abused custom versions…
Leave a CommentThe FBI has issued a public warning to members of the ShinyHunters extortion group following the arrest of a 24-year-old man in Amsterdam who authorities…
Leave a CommentA ransomware group known as The Gentlemen has listed the Los Angeles County Metropolitan Transportation Authority, better known as LA Metro, on its dark web…
Leave a CommentPasskeys have increasingly been promoted as the future of authentication. They eliminate the need to remember a password, they’re resistant to traditional phishing attacks, and…
Leave a CommentArtificial intelligence is changing education in ways few people imagined just a few years ago. While many discussions have focused on students using AI to…
Leave a CommentThe promise of remote testing was simple. Students could take an exam from home while artificial intelligence monitored for suspicious behavior, reducing the need for…
Leave a CommentApple has spent the last several years expanding features designed to protect users from unwanted sexual images. The company’s Sensitive Content Warning and Communication Safety…
Leave a CommentThis is going in to the news of the “We’re sStill Investigating” department. While the bottom of the article asks specific questions to the company,…
Leave a CommentHello gang, Here we go with not notifying you about the program once again. I’ve really got to get better on making sure that we…
Leave a Comment
Sans Ouch for November 2026: Account Recovery
Gang, We’re getting back in to Sans, and I am going to try and get us back and running with posting these things. This month,…