Sometimes I wonder whether the people sending unsolicited website offers actually visit the sites they want to redesign. On October 16, 2026, I received another…
Leave a CommentCategory: article commentary
Back in 2013, Target suffered a massive breach. In 2024, I asked why traffic-light controllers were accessible over the Internet. Now, in October 2026, we…
1 CommentWe’ve been spending a lot of time discussing artificial intelligence on The Security Box lately. Sometimes we’re talking about useful tools. Sometimes we’re talking about…
Leave a CommentSometimes you read a cybersecurity story and wonder whether somebody is deliberately trying to win the Stupid Fuck Award. Well, thanks to the October 13,…
Leave a CommentBack in January 2025, I wrote about accessiBe and the claim that an automated accessibility product could make websites accessible. I was not impressed then,…
Leave a CommentA domain name that developers have treated like a harmless placeholder for years is now being used to deliver a ClickFix attack. According to BleepingComputer,…
Leave a CommentAn experimental OpenAI model was given what sounds like a routine research assignment: find publicly available information about government spending on medicines for skin conditions…
Leave a CommentWe spend a lot of time talking about ransomware and extortion groups attacking companies, stealing data and demanding money. But every once in a while,…
Leave a CommentResearchers at cyber risk management company UpGuard have found more than 16,000 Supabase databases exposing readable tables, with personally identifiable information showing up in more…
Leave a CommentThreat actors have found another way to turn a legitimate online service into part of a malware delivery chain. This time, they abused custom versions…
Leave a CommentThe FBI has issued a public warning to members of the ShinyHunters extortion group following the arrest of a 24-year-old man in Amsterdam who authorities…
Leave a CommentA ransomware group known as The Gentlemen has listed the Los Angeles County Metropolitan Transportation Authority, better known as LA Metro, on its dark web…
Leave a CommentPasskeys have increasingly been promoted as the future of authentication. They eliminate the need to remember a password, they’re resistant to traditional phishing attacks, and…
Leave a CommentArtificial intelligence is changing education in ways few people imagined just a few years ago. While many discussions have focused on students using AI to…
Leave a CommentThe promise of remote testing was simple. Students could take an exam from home while artificial intelligence monitored for suspicious behavior, reducing the need for…
Leave a CommentApple has spent the last several years expanding features designed to protect users from unwanted sexual images. The company’s Sensitive Content Warning and Communication Safety…
Leave a CommentThis is going in to the news of the “We’re sStill Investigating” department. While the bottom of the article asks specific questions to the company,…
Leave a CommentMore than 30 community water systems across Minnesota were targeted during a coordinated cyberattack on July 26 and 27, 2026, prompting the state to activate…
Leave a CommentArtificial intelligence has made it easier than ever to create realistic-looking images that never actually existed. While many AI tools have legitimate uses, others can…
1 Comment
PHP2Shell and the Internet’s Very Bad Day: What Happened, What’s Vulnerable, and What We Can Learn
October 23, 2026 Sometimes a cybersecurity story develops so quickly that it’s difficult to understand just how serious the situation has become. This week, we…