Supply Chain Security on Jorge Laurel

The Agent Went Off Script And A Human Reviewer Stopped It.

Wed, 05 Aug 2026 18:54:26 +0000

On 28 July 2026, the UK AI Security Institute saw data leaving one of its research systems over Tor. Within an hour, every related evaluation was terminated, the machines were isolated, and a security incident was declared. The investigation that followed did not find a sandbox escape. It found something less familiar: AI agents under test taking sustained, unsanctioned action against real people and real organizations on the live internet.

Friday Wrap Up: 3 April 2026

Fri, 03 Apr 2026 00:00:00 +0000

This week in cybersecurity was a masterclass in how fast things can go sideways. 🔐

Ransomware operators are now completing full attacks in under an hour. AI platforms you use every day shipped critical vulnerabilities. A supply chain attack hit a JavaScript library with 100M+ weekly downloads. And someone accidentally leaked 512,000 lines of AI source code — which attackers immediately weaponized into a malware campaign on GitHub.

If your patch queue looks overwhelming right now, you’re not alone. Chrome, Cisco, F5, Fortinet, and more all dropped critical fixes this week — many already under active exploitation before patches shipped.

Friday Wrap Up: 20 March 2026

Fri, 20 Mar 2026 00:00:00 +0000

It’s Friday, which means the threat actors didn’t take the week off — and neither did we. 🛡️

This week’s Friday Wrap Up covers ransomware gangs weaponizing zero-days, nation-state actors wiping devices at scale, supply-chain attacks hitting developer toolchains, AI platforms becoming the new attack surface, and a botnet that clearly skipped leg day because it never stops running. Whether you’re patching, detecting, or just trying to make it to 5pm, there’s something in this week’s roundup that probably affects your org.

Friday Wrap Up: 6 February 2026

Fri, 06 Feb 2026 00:00:00 +0000

Another week, another supply chain nightmare. 🎢

This week’s cybersecurity roundup features everything from compromised software updates (yes, even Notepad++) to record-breaking DDoS attacks that would make your infrastructure cry. We’ve got nation-state actors playing Olympics spoiler, fintech firms losing millions of records, and AI agents getting their own social network (because apparently they need friends too).

Whether you’re defending against WinRAR exploits or wondering if your antivirus just became your biggest threat, this week had something for everyone.

Friday Wrap Up: 28 November 2025

Fri, 28 Nov 2025 00:00:00 +0000

This week’s cybersecurity landscape? Let’s just say the supply chain attacks are getting creative, the credential leaks are getting embarrassing, and emergency alert systems proved they’re not immune to ransomware.

From worms named after sci-fi sandworms to threat groups with identity crises, we’ve got breaches affecting everything from real estate finance to your favorite analytics platforms.

Oh, and reminder: those “helpful” code formatting websites? They’ve been collecting your credentials like Pokémon cards. Click through for the full roundup of this week’s digital chaos.

Friday Wrap Up: 31 October 2025

Fri, 31 Oct 2025 00:00:00 +0000

Happy Halloween! 🎃

This week’s cyber threats are scarier than any haunted house. We’ve got banking trojans that disguise themselves as humans, nation-state ghosts haunting European diplomats, and AI tools conjuring up security nightmares that would make Frankenstein nervous.

Ransomware ghouls are back with new tricks, supply chain vampires are draining developer credentials, and Microsoft’s DNS went dark like a haunted mansion.

Whether you’re more afraid of deepfakes, zero-days, or your cloud services vanishing into thin air, this week’s wrap-up has something to give every security professional the chills.

Friday Wrap Up: 26 September 2025

Fri, 26 Sep 2025 00:00:00 +0000

Another week, another batch of creative ways cybercriminals are keeping us security folks caffeinated! ☕

From airports getting grounded by ransomware to AI agents accidentally becoming the world’s most helpful data thieves, this week’s threat landscape had more plot twists than a Netflix series. We saw record-breaking DDoS attacks that made previous “massive” attacks look like gentle nudges, supply chain compromises that spread faster than office gossip, and enough zero-days to make patch Tuesday feel like patch decade.

Friday Wrap Up: 12 September 2025

Fri, 12 Sep 2025 00:00:00 +0000

💥 This week in cyber was one for the history books.

📦 The world’s largest supply chain attack hit npm, with billions of downloads tainted.
⚡ Nation-state espionage escalated as China-linked groups ramped up campaigns tied to trade negotiations.
💻 Ransomware evolved yet again, with HybridPetya breaking UEFI Secure Boot and Akira exploiting SonicWall appliances.
📱 Meanwhile, Samsung scrambled to patch a WhatsApp-linked zero-day, and Apple unveiled a five-year project to shut down spyware developers.

Friday Wrap Up: 13 December 2024

Fri, 13 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Category: Critical Infrastructure and Software Risks

⚠️ 90% of software in U.S. critical infrastructure contains code developed in China, posing systemic risks. (Published on 12/9/2024, Dark Reading). Read More
🛠️ Forrester panel explores software supply chain vulnerabilities and global IT security challenges. (Published on 12/10/2024, InformationWeek). Read More

Friday Wrap Up: 18 October 2024

Fri, 18 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Updates

🔐 Supply chain attacks exploit entry points in open-source ecosystems like Python and npm, posing a widespread risk. (Published on 10/14/2024, The Hacker News). Read More
🖥️ Iranian cyberspies are exploiting a recent Windows kernel vulnerability, targeting Gulf region organizations. (Published on 10/14/2024, SecurityWeek). Read More

Friday Wrap Up: 28 June 2024

Fri, 28 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 Google is testing “Digital Credential API” for Chrome on Android to enhance secure ID verification via mobile wallets. (Published on 6/24/2024, IoT and Edge). Read More

⚠️ The ‘GrimResource’ attack exploits MSC files and an unpatched Windows XSS flaw for network breaches. Stay alert! (Published on 6/24/2024, BleepingComputer). Read More

Friday Wrap Up: 9 May 2024

Thu, 09 May 2024 00:00:00 +0000

Another week, another thrilling episode of As The Cyber World Burns 🔥

From ransomware groups getting hacked (yes, really) to backdoored npm packages, fake installers, Pegasus penalties, and one too many Mirai botnets—I’ve highlighted the news story. Even a Signal clone used by a politician decided to just… stop existing.

If you’re into CIO existential crises, DDoS takedowns, or wondering what “Bring Your Own Installer” could possibly mean (spoiler: nothing good), I’ve highlighted it in this week’s Friday Wrap Up. Because in cybersecurity, the only constant is, well… incident response.

Friday Wrap Up: 29 March 2024

Fri, 29 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔑 New MFA-Bypassing Phishing Kit Targets Microsoft 365, Gmail - Cybercriminals exploit ‘Tycoon 2FA’ to bypass 2FA on major email platforms. (3/25/2024, BleepingComputer) Read more

🍏 iOS 17.4.1 and macOS 14.4.1 Update for Security Fixes - Apple rolls out crucial security updates without much detail. (3/25/2024, 9to5 Mac) Read more