Monadnock Cyber

  Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Wednesday, September 23, 2026  •  At the intersection of AI and Security What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Sources named after each item. Confirmed facts and unverified claims are labeled throughout. Featured · the big one ● Extortion · claims + confirmed vector Clop’s Oracle raid — and the gang that robbed the robbers One of 2026’s biggest breaches isn’t a single company — it’s Clop’s mass extortion of Oracle E-Business Suite customers through the zero-day CVE-2025-61882 (CVSS 9.8), which the gang has been exploiting since last summer. The public victim list has grown into the dozens — by some counts past a hundred — spanning consumer brands, banks, universities and industrials. Our collection surfaced a batch of those Clop listings this week; they remain unverified leak-site claims until each company confirms. Sources: BankInfoSecurity · hxxps://www[...

Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Tuesday, September 22, 2026  •  At the intersection of AI and Security What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Sources are named after each item. Confirmed facts and unverified claims are labeled throughout. Analyst’s Notes The breadcrumbs were already there Jeff Stutzman · Monadnock Cyber Today’s brief is about speed — agent swarms running an entire intrusion in hours. So here’s the question that’s been eating at me: if the attack moves that fast, is there any warning at all? I went looking in our own data. I pulled every ransomware victim that hit our feed this month and asked one thing — were the signs there before they got hit? Repcolite Paints, a paint company, not a bank — we had 124 of their credentials in hand by April 28th, pulled from a dark-web dump. A ransomware crew posted them on September 6th. That’s 130 days. They weren’t alone. Thirteen victims had ex...

Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Monday, September 21, 2026  •  At the intersection of AI and Security What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Confirmed facts and unverified claims are labeled throughout. ● Foreign desk · raw & unevaluated China Desk: what Beijing is saying about cyber today New this week: we’re pulling foreign-language coverage into collection. This is a first, unfiltered look — machine-translated, not yet source-graded, and it includes Chinese state media. Read it as raw signal, not a finished assessment. China is running its annual National Cyber Security Awareness Week (launched September 14, nationwide). This year’s theme centers on the “intelligent era” — AI security (“智能时代 网安护航”). Coverage across state and commercial outlets (China.com.cn [1] , Guangming, Baidu) carries these themes: AI at machine speed. A widely-run piece frames it as the “attack-and-defense battle” of ...

Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Saturday, September 19, 2026  •  At the intersection of AI and Security Special Edition · Field Notes Learning the Hard Way A field guide to avoidable AI-and-cyber mistakes from the past year — shared for the fix, not the finger-pointing. Every team is one bad afternoon away from a story like these. Here are three documented cases from the past year where a brand-new tool met a very old mistake — and what each one should teach the rest of us. Every case is real and sourced. We’ve anonymized the smaller players on purpose: the lesson matters more than the name, and nobody here needs piling-on. The comfort, if there is any, is that the technology is brand new and the fixes are decades old. I Lesson · trusting the agent too far ● Verified · publicly reported “I Gave the Robot the Keys to Production” The story: A founder, mid-way through a very public multi-day “vibe coding” trial, handed an AI coding agent live acc...

  Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Friday, September 18, 2026  •  At the intersection of AI and Security What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Confirmed facts and unverified claims are labeled throughout. Featured · AI in the kill chain ● Verified · vendor research The phone drives itself: banking malware that hands the wheel to an AI Researchers at Zimperium’s zLabs detailed a new Android banking trojan they call RatHat [1] that does something we have been warning was coming: it offloads the on-device navigation to an AI model . Rather than script every tap in advance, RatHat serializes the phone’s live Accessibility tree into XML and sends it to an AI assistant, which identifies on-screen elements and returns navigation commands — scroll here, tap there — so an operator can drive an infected phone in real time. Zimperium assesses the operators are China-based, citing LLM prompts written in C...