Click any tag below to further narrow down your results
Links
This daily roundup covers Fortinet’s FortiBleed campaign exposing 86,000 device credentials, a Texas hunting-license vendor breach affecting 3 million records, and an unpatchable BootROM exploit on Apple A12/A13 chips. It also highlights GitHub’s context-aware secret scanning, the Novo Nordisk code leak via a stolen GitHub token, and other emerging tools and vulnerabilities.
- FortiBleed exposed 86,000+ valid Fortinet credentials across 194 countries via 1.16 billion login attempts against 320,000 FortiGate devices, with hashes cracked on a 45-GPU cluster.
- A Texas hunting/fishing license vendor breach leaked driver's license and passport numbers for 3.09 million people, already being sold by a threat actor linked to a prior Virginia wildlife breach.
- The unpatchable "usbliter8" BootROM exploit affects Apple A12/A13 chips (iPhone XS to iPhone 11), installing a restart-persistent handler that downgrades security and boots unsigned code.
- GitHub's new context-aware LLM secret scanning cuts false positives by over 75% by isolating code paths where secrets feed into API calls, auth headers, or database clients.
- FulcrumSec stole a GitHub PAT to exfiltrate 1.3 TB from Novo Nordisk, including the Ozempic formula and clinical-trial data for 11,500 patients, leaking 264 GB after a refused $25 million ransom.
This daily roundup covers a 40 GB data breach at the University of Nottingham, a lost-drive incident exposing 10.9 million Japanese utility customers, and a proof-of-concept Exchange spoofing flaw. It also highlights automated AI-driven attack research, supply-chain toolkits on GitHub, and new product launches for dependency patching and taint analysis.
- ShinyHunters exploited a zero-day gadget chain in University of Nottingham's PeopleSoft to steal 40GB of data on 454,600 students, including passport numbers and disability details.
- Kyushu Electric Power lost a physical backup drive exposing personal and usage data for 10.9 million customers.
- InfoGuard's "Ghost-Sender" exploit spoofs any Exchange Online address (even CEO/noreply) via a one-line PowerShell script, bypassing SPF, DKIM, and DMARC.
- A researcher earned over $500,000 in bug bounties using an AI-driven fuzzer to scrape thousands of Google API keys and find leaky internal-only endpoints.
a16z led Westmag’s seed round to create a domestic motor and actuator manufacturer, tackling U.S. supply-chain reliance on Chinese parts amid tighter drone regulations. Founders David Hansen and Jordan Sanders have set up a semi-automated factory in South San Francisco and are scaling production for defense and robotics customers.
- China produces over 30 million more motors/actuators annually than the U.S., creating a critical supply-chain vulnerability for defense and robotics OEMs.
- A new FCC rule banning foreign drones and components (including motors) starting December 2025 is forcing U.S. manufacturers to scramble for domestic suppliers.
- Westmag, founded by David Hansen and Jordan Sanders, built a semi-automated U.S. factory (South San Francisco) and went from concept to shipping qualified motors/actuators in under a year.
- a16z led the seed round, betting on the founders' combination of deep motor expertise and manufacturing execution to fill the domestic supply gap.
The post highlights the ongoing shortage of RAM memory modules in the tech supply chain. It points to production bottlenecks and high demand that keep prices elevated and inventory low.
- The only substantive content available is a single tweet stating "This is why we still have a ram crisis btw," with no supporting article text provided.
- No specific data, names, or figures about RAM shortages, pricing, or supply chain bottlenecks are present in the material given.
After taking the helm just before Steve Jobs’s death, Tim Cook grew Apple’s value from $297 billion to $4 trillion by scaling the iPhone, overhauling manufacturing, and pushing Services. He built a just-in-time supply chain in China, launched products like AirPods and Watch, and prioritized shareholder returns even amid App Store policy debates.
- Cook took over six weeks before Jobs's death and grew Apple's market value from $297 billion to $4 trillion in 15 years, mainly by scaling and operationalizing Jobs's inventions rather than creating new ones.
- He built a just-in-time, China-based manufacturing supply chain with no significant recalls, and expanded peripherals like AirPods and Apple Watch into a $35.4 billion business.
- He kept Apple's 30% App Store fee intact despite internal pressure (from Phil Schiller) to cut it, prioritizing profit and gatekeeper control over ecosystem growth.
- The Google search-default deal on Safari, dating to 2002, remains a pure-profit revenue stream underpinning Apple's Services push.