U.S. oil industry earned over $130B during Iran war
A New York Times business story posted on Hacker News is not a cybersecurity or AI event.
3
- Mentions · 7d4
- Mentions · 30d37
- All mentions117
- First seenAug 12, 2026
- Last mentioned20h ago
Timeline
117 articles · newest firstRoundup: UEFI boot flaw, Anthropic access dispute, Cloudflare AI leak
The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
62
Ex-Mossad chief says sabotaged devices sit in many countries
Yossi Cohen says the pager method began in 2002–2004 and was not deployed enough in Gaza before October 7, 2023.
32
Digital Dissident devroom at FOSDEM 27 seeks anti-censorship talks
Speakers should cover end-to-end toolchains for people in Russia, Iran, China and similar regimes, not single-product pitches.
16
Prince of Persia APT hosts C&C in US for first time since 2016
After a three-month pause, Tonnerre stole more than 1,800 files from one victim within a week of the May 27 restart.
68
House bill would direct NIST guidance on AI distillation attacks
The AI Cyber Defense Act covers entities tied to Russia, China, Iran, and North Korea and would add an industry roundtable.
54
Prince of Persia found hosting command-and-control servers in the US
Semperis traced Tornado malware to a US host after the group appeared quiet following February strikes on Iran.
58
Lawmakers say Russia seeks to undermine Democrats before midterms
They say a classified assessment finds influence activity by Russia, China, Iran, and North Korea, but no vote-system hacking.
44
Attackers hide command and control in trusted cloud services
Cited cases include Gridtide on Google Sheets, SesameOp via OpenAI APIs, and a reported Intune wipe at Stryker.
34
AI antidetect browsers used for fraud and influence operations
Kameleo, AdsPower, and MultiLogin can feed LLM content into profiles and accept stolen session cookies.
58
New York mayor says federal AI oversight has been abdicated
Mamdani cited a school AI ban and a real-estate disclosure rule while criticizing self-regulation and a China arms-race framing.
42
MITRE ATT&CK v20 adds AI abuse, MFA bypass, and utility attacks
Enterprise gains nine entries, ICS adds two campaigns plus analytics, and Mobile restores sideloading and NGate.
61
Tor Project recounts building Tor VPN Beta for Android
Each app gets its own Tor circuit, and WebTunnel bridges arrived in 1.4.0 beta after censored-region use reshaped the product.
36
Encryption Is Getting Squeezed From All Sides
Canada's C-22 bill could force encryption backdoors and metadata retention, prompting Signal and Psiphon to threaten exit.
62
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
FBI warns scammers are cloning 2026 midterm candidates with AI to steal donations and voter data.
66
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Bank of America hired 1,000 contractors to patch Anthropic Mythos findings amid large AML penalties.
62
Data Centers Are War Targets Now
Ukrainian drones struck Russian Yandex and Sberbank data centers, disrupting everyday digital services across Russia.
73
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
X removed over 13,000 accounts it links to Iranian, Russian, and Chinese influence operations ahead of US midterms.
58
Critical infrastructure orgs face heightened cyber risk from nation-state groups, AI threats
Tenable warns critical infrastructure faces nation-state and AI-driven attacks and recaps CISA hygiene guidance.
40
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
32
Iranian VPN-over-DNS Activity Generates 40 Billion DNS Observations During Military Conflict
DomainTools traced 40 billion DNS observations to suspected Iranian VPN-over-DNS tunneling during a March 2026 conflict.
58
DarkBlinders Hackers Use Fake Meeting App to Deploy Backdoor and Steal Government Data
DarkBlinders used a fake StarkMeet app and GitHub to backdoor systems and steal Kurdistan government data.
72
OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT
OpenAI banned ChatGPT accounts tied to Russian and Iranian influence operations spreading propaganda and fake research.
76
OpenAI uncovers Russian and Iranian influence ops that planted fake stories in real news outlets
OpenAI banned ChatGPT accounts used by Russian and Iranian operators to plant fake stories in real outlets.
64
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
OpenAI disrupted Russian and Iranian campaigns that used ChatGPT to plant AI personas and stories in mainstream media.
76
Disrupting AI-enabled “false front” operations
OpenAI banned Russian and Iranian influence operations that used ChatGPT to run false-front media and think-tank campaigns.
74
Toronto-Based VPN Provider Plans to Quit Canada Over Lawful-Access Bill
Psiphon will leave Canada if Bill C-22 requires secret surveillance access for police and CSIS.
46
Hackers Exploit Exposed Industrial Controllers to Disrupt US Water and Critical Infrastructure
Attackers disrupted US water utilities via exposed Rockwell controllers, alongside other industrial-control campaigns.
86
Hackers Pose as Dubai Airports Recruiters to Infect Software Engineers With ShelbyLoader V2
Iranian-linked CL-STA-1178 posed as Dubai Airports recruiters to infect engineers with ShelbyLoader V2.
74
OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes
State-linked actors are targeting US critical-infrastructure OT, with confirmed water-system disruption and Volt Typhoon pre-positioning.
81
Sen. Adam Schiff on AI regulation, free speech, and impeaching Trump one more time
Sen. Adam Schiff says voluntary AI pledges are insufficient and backs a dedicated regulator.
38
The US needs a real plan to defend its water systems
Op-ed says US water utilities need a federal cybersecurity plan after foreign attacks and rising AI-enabled threats.
36
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Montenegro approved extraditing Amir Barati over an alleged IRGC-linked theft of 31TB from universities.
73
U.S. may have overthrown Venezuela due to chat with Grok
Daily Beast says Trump consulted Grok before ordering Maduro's capture and is pushing voluntary AI rules.
36
In Rare Move, Iranian Hacker Accused of Working for IRGC Extradited to US
Montenegro extradited alleged Mabna Institute hacker Amir Barati, accused of IRGC-linked intrusions causing over $3.4 billion in losses.
64
Musk’s AI chatbot Grok reportedly encouraged Trump to capture Venezuela’s president
Time reports Trump consulted xAI's Grok before the U.S. capture of Venezuela's president Nicolas Maduro.
52
Iranian accused of hacking American universities extradited from Montenegro
Montenegro extradited Iranian hacker Amir Barati, charged over the Mabna Institute university data-theft campaign.
50
Cloudflare plans to issue quantum-safe TLS certificates
Cloudflare plans quantum-safe TLS certificates for early 2027 using compact Merkle Tree proofs.
46
WaterISAC reckons with range of threats after summer of cyberattacks
WaterISAC cites internet-exposed OT and aging PLCs as top water-sector weaknesses, partnering with Cyware for faster threat sharing after Iran-attributed summer attacks.
40
She Spoofed Sea Ships by the Sea Shore: Measuring Large-Scale GPS Spoofing in Global Maritime Traffic
AIS data from 367,000 vessels show at least 22 GPS-spoofing hotspots, including earlier Red Sea interference.
76
Related CVEs
by mentions- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-593098%9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
- CVE-2023-20198100%10.0Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)
- CVE-2024-3400100%10.0Unauthenticated Root Command Injection in Palo Alto Networks PAN-OS GlobalProtect
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2024-21887100%9.1Command Injection RCE in Ivanti Connect Secure and Policy Secure
- CVE-2023-46805100%8.2Authentication Bypass in Ivanti Connect Secure and Policy Secure Web Component
- CVE-2023-2027393%7.2Authenticated Command Injection (Root) in Cisco IOS XE Web UI
- CVE-2026-97631<1%9.5Remote buffer overflow in EDK2 BIOS
Appears with
- FBIorganization · 30
- CISAorganization · 22
- Microsoftvendor · 16
- CyberAv3ngersthreat actor · 13
- Mabna Institutethreat actor · 12
- OpenAIvendor · 11
- NSAorganization · 8
- NCSCorganization · 8
- Microsoft Defenderproduct · 8
- EPAorganization · 7
- Chosen Brickmalware · 7
- OpenAIorganization · 7
- Iranthreat actor · 7
- Anthropicvendor · 6
- ChatGPTproduct · 6
- AIVDorganization · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.