# cyber Published articles for cyber. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## CrowdStrike SafeMind Uses Adversarial Co-Evolution to Improve AI-Powered Cybersecurity DevFeed: [CrowdStrike SafeMind Uses Adversarial Co-Evolution to Improve AI-Powered Cybersecurity]() Original publisher: [Read original article]() Author: Ioana Croitoru - Sean Pagano - Keegan Hines - Alexander Nazarian - Chase Midler Published: 2026-09-18T01:40:54.157408Z Content type: article Language: en Sources: [Blog]() Topics: [Security](), [Artificial Intelligence](), [Machine Learning, Security Attacks](), [Architecture & Design]() Tags: [agent](), [ai](), [architecture](), [cyber](), [scale](), [securing-ai](), [security]() ### AI overview CrowdStrike describes SafeMind, a closed-loop cybersecurity system in which offensive and defensive AI agents continuously test and improve one another. The system is designed to generate attacks, strengthen defenses, and automate detection creation at scale. ### Source excerpt SafeMind is a closed-loop system where offense and defense continuously sharpen each other, resulting in a defense that's been forged against the best possible attacks. Learn more! ## China's Salt Typhoon backdoors Latin American orgs with new snooping malware DevFeed: [China's Salt Typhoon backdoors Latin American orgs with new snooping malware]() Original publisher: [Read original article]() Author: Jessica Lyons Published: 2026-09-17T18:00:17Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [backdoor](), [Malware](), [Cybersecurity](), [infosec]() Tags: [backdoor](), [backdoor-malware](), [china](), [cyber](), [cybersecurity](), [malware](), [salt-typhoon](), [security](), [sparrowocky]() ### AI overview A news report about Salt Typhoon using new snooping backdoors and malware against organizations in Latin America. ### Source excerpt Beware the SparroWocky, my son! The backdoor that bites... ## Welcoming the Sri Lankan Government to Have I Been Pwned DevFeed: [Welcoming the Sri Lankan Government to Have I Been Pwned]() Original publisher: [Read original article]() Author: Troy Hunt Published: 2026-08-23T06:39:45Z Content type: news Language: en Sources: [Troy Hunt]() Topics: [monitor](), [service](), [data]() Tags: [cyber](), [data](), [data-breaches](), [government](), [have-i-been-pwned](), [monitor](), [public-sector](), [service](), [visibility]() ### AI overview Have I Been Pwned has onboarded Sri Lanka as its 48th government customer for the free HIBP service. Sri Lanka CERT can monitor government domains for exposed accounts and respond to new data breaches. ### Source excerpt Today, we welcome the 48th government onboarded to Have I Been Pwned's free gov service: Sri Lanka. Sri Lanka CERT now has access to monitor Sri Lankan government domains against the data in HIBP, helping identify exposed government accounts and respond when they appear in new data breaches. ## Weekly Update 517: Cyber Ransoms DevFeed: [Weekly Update 517: Cyber Ransoms]() Original publisher: [Read original article]() Author: Troy Hunt Published: 2026-08-18T03:44:58Z Content type: opinion Language: en Sources: [Troy Hunt]() Topics: [ransomware](), [Cybercrime]() Tags: [breach](), [class](), [cyber](), [ransomware](), [weekly-update]() ### AI overview The article comments on ransomware as extortion, the financial motives of attackers, and the legal and communication pressures faced by breached companies. ### Source excerpt The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out by kids who successfully make a truckload of money but can't spend it without ## Digital Policy in the Coalition Agreement: AI, Cybersecurity and Digital Autonomy DevFeed: [Digital Policy in the Coalition Agreement: AI, Cybersecurity and Digital Autonomy]() Original publisher: [Read original article]() Published: 2026-02-02T11:00:00Z Content type: opinion Language: nl Sources: [Bert Hubert's writings]() Topics: [Security & Privacy](), [Cybersecurity](), [Cloud](), [Artificial Intelligence]() Tags: [ai](), [cloud](), [cyber](), [cybersecurity](), [overheid]() ### AI overview This opinion article reviews digital policy in the coalition agreement, highlighting enthusiasm for AI, proposed government IT centralization, efforts to reduce reliance on American cloud providers, and measures related to cybersecurity and digital autonomy. ### Source excerpt Het coalitieakkoord heeft een boel woorden die raken aan digitalisering, digitale autonomie en cybersecurity. Veel van de plannen komen niet uit de lucht vallen, en zijn gebaseerd op bijeenkomsten, gesprekken en documenten van de afgelopen jaren. Het is goed te zien dat men gebruik heeft gemaakt van dit eerdere werk (zoals het stuk Wolken aan de horizon, en Ons Digitaal Fundament). Specifiek moet het initiatief van de digitale club van D66 om samen te werken met de digitale zuster-afdelingen van CDA, GroenLinks-PvdA en VVD genoemd worden, waar een gezamenlijk document met input uit is gekomen. ## "Cyber Special Operations": China-linked influence planning DevFeed: ["Cyber Special Operations": China-linked influence planning]() Original publisher: [Read original article]() Published: 2026-02-01T00:00:00Z Content type: article Language: en Sources: [OpenAI News]() Topics: [Artificial Intelligence](), [OpenAI](), [ChatGPT]() Tags: [ai](), [case-study](), [china](), [cyber](), [fake-accounts](), [influence](), [japan](), [openai](), [report](), [reporting](), [safety](), [social-media]() ### AI overview OpenAI describes banning a ChatGPT account linked to an individual associated with Chinese law enforcement after the account was used to plan covert influence activity, harassment, and online operations targeting the Japanese prime minister and other adversaries. The article says the model refused to assist with the influence-operation planning but was asked to edit and polish status reports. Open-source investigation linked the reported activity to a broader alleged Chinese law-enforcement strategy involving fake accounts, AI models, and multiple online tactics. ### Source excerpt OpenAI banned an account linked to an individual associated with Chinese law enforcement, using AI to plan influence activity, harassment, and online operations. ## Cyber Security: A Pre-War Reality Check DevFeed: [Cyber Security: A Pre-War Reality Check]() Original publisher: [Read original article]() Published: 2024-05-14T18:48:26Z Content type: opinion Language: en Sources: [Bert Hubert's writings]() Topics: [Security](), [Cybercrime]() Tags: [autonomy](), [conference](), [cyber](), [cybersecurity](), [presentation](), [resilience](), [security](), [speech]() ### AI overview A lightly edited transcript of a presentation arguing that cybersecurity should be understood not only as protecting secrets and systems from hackers or ransomware, but also in the context of war and broader societal security risks. The speaker calls for a more realistic assessment of the current security environment. ### Source excerpt This is a lightly edited transcript of my presentation today at the ACCSS/NCSC/Surf seminar 'Cyber Security and Society'. I want to thank the organizers for inviting me to their conference & giving me a great opportunity to talk about something I worry about a lot. Here are the original slides with notes, which may be useful to view together with the text below. In the notes there are also additional URLs that back up the claims I make in what follows. ## Cybersecurity Is Like Food Safety: Digital HACCP DevFeed: [Cybersecurity Is Like Food Safety: Digital HACCP]() Original publisher: [Read original article]() Published: 2021-02-18T08:31:12Z Content type: opinion Language: en Sources: [Bert Hubert's writings]() Topics: [Cybersecurity](), [Security & Privacy]() Tags: [cyber](), [cybersecurity](), [digital](), [security]() ### AI overview The article argues that cybersecurity is more like food safety than a product that can be purchased. Effective protection depends on understanding risks, consistently following appropriate practices, measuring compliance, and maintaining vigilance across the supply chain. It introduces HACCP as a potential source of ideas for cybersecurity. ### Source excerpt There are lots of calls to invest in improving cybersecurity. But it struck me that it doesn't work like that. Not getting hacked is not so much a question of buying the right stuff. It is a question of doing the right things and understanding what you are doing. It is easy to demand that people 'invest' in something. You can even supply them with the money to do so. ## Sociotechnical Approach to Cyber Security DevFeed: [Sociotechnical Approach to Cyber Security]() Original publisher: [Read original article]() Author: Adam Published: 2020-07-24T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [context]() Tags: [approach](), [cyber](), [post](), [security](), [technical](), [uk]() ### AI overview This post highlights a recent UK NCSC article by Helen L. on sociotechnical approaches to cybersecurity, including the context of these approaches, the RISCS Institute, and a related problem book. ### Source excerpt A recent post from Helen L. of the UK's NCSC, A sociotechnical approach to cyber security, shares the context of socio-technical approaches. ## Worthwhile Books (Q1 2020) DevFeed: [Worthwhile Books (Q1 2020)]() Original publisher: [Read original article]() Author: Adam Published: 2020-04-14T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Threat Research]() Tags: [books](), [cyber](), [cybersecurity](), [history]() ### AI overview The author recommends books read in the first quarter of 2020, including works about cybersecurity, the NotPetya worm, online harassment, weather science, Tolkien, Theranos, and synthetic intellects. The article highlights lessons about observation, knowledge-sharing, loyalty, and cybersecurity. ### Source excerpt These are the books I read in the first quarter (and forgot to mention last quarter) that I think are worth your time. ## Books Worth Your Time (Q4) DevFeed: [Books Worth Your Time (Q4)]() Original publisher: [Read original article]() Author: Adam Published: 2019-12-01T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Hacking](), [huawei](), [C](), [Finance]() Tags: [books](), [cyber](), [energy](), [game](), [hacking](), [huawei](), [review](), [space]() ### AI overview A quarterly reading list reviews books about cybersecurity and hacking, including Huawei-related trust risks and the history of the hacking scene, alongside nonfiction about solar energy, spaceflight, and cooperative game design. ### Source excerpt Just what the title says... ## DNS Security DevFeed: [DNS Security]() Original publisher: [Read original article]() Author: Adam Published: 2019-06-13T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [DNS security](), [Security]() Tags: [cyber](), [deploy](), [dns](), [dns-security](), [easy](), [effective](), [report](), [research](), [security](), [threat-intel]() ### AI overview The Global Cyber Alliance published research by Jay Jacobs, Wade Baker, and the author on the value of DNS security. The article says DNS providers using threat intelligence to block malicious sites can be effective and easy to deploy, citing a report that says DNS security can mitigate one-third of cyber incidents. ### Source excerpt I'm happy to say that some new research by Jay Jacobs, Wade Baker, and myself is now available, thanks to the Global Cyber Alliance. ## When security goes off the rails DevFeed: [When security goes off the rails]() Original publisher: [Read original article]() Author: Adam Published: 2019-06-07T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [Cybercrime]() Tags: [analysis](), [cyber](), [investigations](), [security]() ### AI overview A brief commentary points to a Dark Reading post about regulation in cybersecurity and argues that cyber can learn from the impartial analysis used in the highly regulated rail industry. It references conflicting accounts of a Baltimore ransomware attack and calls for an investigative capability that can establish the facts. ### Source excerpt My newest post over at Dark Reading ponders regulation. ## Best Cyber News Blogs, thanks! DevFeed: [Best Cyber News Blogs, thanks!]() Original publisher: [Read original article]() Author: Adam Published: 2018-04-30T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security]() Tags: [blogs](), [cyber](), [news]() ### AI overview The author thanks CyberDB for including Shostack + Friends Blog in its list of Best Cyber Security News Blogs 2018. ### Source excerpt [no description provided] ## SEC Fines Yahoo $35 Million Over Disclosure of Russian Hacking DevFeed: [SEC Fines Yahoo $35 Million Over Disclosure of Russian Hacking]() Original publisher: [Read original article]() Author: Adam Published: 2018-04-24T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [incident](), [Hacking]() Tags: [breach](), [company](), [cyber](), [disclosure]() ### AI overview The article discusses the SEC's $35 million fine against Yahoo for failing to disclose a Russian hacking incident to investors. It highlights the SEC's view that the company's response warranted enforcement action. ### Source excerpt [no description provided] ## An accessible explanation of the Spectre and Meltdown CPU vulnerabilities DevFeed: [An accessible explanation of the Spectre and Meltdown CPU vulnerabilities]() Original publisher: [Read original article]() Published: 2018-01-06T09:34:05Z Content type: article Language: en Sources: [Bert Hubert's writings]() Topics: [Security](), [Vulnerabilities](), [cpu](), [Architecture & Design]() Tags: [accessible](), [cpu](), [cyber](), [processor](), [programming](), [security](), [vulnerabilities]() ### AI overview An accessible explanation of the Spectre and Meltdown vulnerabilities, including how CPU out-of-order execution improves processing speed while remaining hidden from executing programs. ### Source excerpt Comments are very welcome on bert@hubertnet.nl or @bert_hu_bert. Update: several constructive remarks have been used to improve this text. Thanks! In this post I will attempt to fully explain the Spectre and Meltdown vulnerabilities in an accessible way. I decided to write it up after I realised it took me more than a day to figure it out, even though I've been doing security related stuff on CPUs for 20 years. ## Worthwhile Books, Q3 DevFeed: [Worthwhile Books, Q3]() Original publisher: [Read original article]() Author: Adam Published: 2017-10-11T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Security](), [Internet of things](), [Internet](), [Architecture & Design]() Tags: [books](), [cyber](), [iot](), [physics](), [reading](), [security]() ### AI overview A quarterly list of books the author recommends, covering cybersecurity and the Internet of Things, nonfiction about activism and learning from mistakes, modern physics, and science fiction. ### Source excerpt Some of what I've read over the past quarter and want to recommend as worthy of your time. ## Breach Vouchers & Equifax 2017 Breach Links DevFeed: [Breach Vouchers & Equifax 2017 Breach Links]() Original publisher: [Read original article]() Author: Adam Published: 2017-09-07T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Security & Privacy](), [Hacking]() Tags: [2017](), [breach](), [cyber](), [data-breaches](), [identity-theft](), [security]() ### AI overview The article argues that Equifax should not provide its own breach-response services after the 2017 data breach. It proposes that the FTC require vouchers so affected consumers can choose independent identity-theft protection and credit-monitoring providers. ### Source excerpt [no description provided] ## Cyber Grand Shellphish DevFeed: [Cyber Grand Shellphish]() Original publisher: [Read original article]() Author: Adam Published: 2017-04-24T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [Software](), [Algorithm]() Tags: [algorithm](), [analysis](), [cyber](), [software]() ### AI overview The article discusses Team Shellphish's participation in the Cyber Grand Challenge and highlights how a hypothetical team that stopped playing could have scored highly under the contest's scoring system. It argues that the result illustrates the difficulty of designing robust scoring systems. ### Source excerpt [no description provided]