JADEPUFFER - First Fully Autonomous AI Ransomware: Sysdig documented the first ransomware run where an AI agent handled the entire kill chain itself recon, credential theft, lateral movement, encryption after exploiting a known Langflow RCE (CVE-2025-3248). It even adapted to failures, going from a failed login to a working fix in 31 seconds. Find out more

Scattered Spider Suspect Extradited to the US: A 19-year-old alleged member was extradited from Finland on conspiracy and computer-intrusion charges, as the FBI warns the group has pivoted to retail and airline targets. Find out more

Microsoft's Record 570+ CVE Patch Tuesday: The largest ever, with two actively exploited zero-days - CVE-2026-56164 (unauthenticated SharePoint Server privilege escalation, caught by Mandiant in live attacks) and CVE-2026-56155 (AD FS). Find out more

Januscape - 16-Year-Old Linux VM Escape: A newly patched flaw broke guest-to-host isolation on Intel and AMD KVM setups. The bug sat in the code for 16 years. Find out more

Vibe Hunting - AI Agents Enter the SOC: Instead of hand-crafting every query, an agent ingests a threat writeup, extracts indicators, builds a search plan and runs it across telemetry compressing hours into minutes. A useful primer on where it works and where it breaks. Find out more

Russian State Actors Are Compromising IP Cameras: The Dutch intelligence service warns that Russian actors are hijacking internet-connected cameras, turning ordinary surveillance hardware into a recon layer for physical and logistics targets. Find out more

1Password Acquires Apono: Identity and access-management vendor 1Password bought Apono, an Israeli just-in-time access-governance firm covering humans, machines and AI agents, in a reported $250–300M deal to extend its identity-security platform. Find out more

Europol EU Terrorism Situation and Trend (EU-TE-SAT) 2026. Report

Sophos — The State of Ransomware 2026. Report.

Russia Exploits Japan's Weak Anti-Espionage Laws: Moscow is leveraging gaps in Japan's espionage legislation to acquire technology with military applications. Find out more

How Dutch Intelligence Missed the Russian Invasion: Despite Ruslandhuis the joint AIVD-MIVD unit set up in 2018 — having access to a Kremlin source, the services failed to anticipate Russia's invasion. Find out more

BBVA and Former Chairman to Stand Trial for Corporate Espionage: Spain's BBVA bank and its ex-chairman will face trial over an alleged corporate spying scheme. Find out more

South Korea Rewrites Its Espionage Law After 73 Years: A new amendment (effective Sept 13) lets leaking secrets or advanced tech to any foreign country not just North Korea be prosecuted as espionage for the first time since 1953. Find out more

Alleged Russian Cyber Spy in Boston Case Previously Worked at Kaspersky: Reuters reports the man charged in a US federal cyber-espionage case had earlier worked for the Russian security firm Kaspersky. Find out more

Facebook Tests Public Post View Counts: Meta is trialling up-front view counts on Facebook posts (creator-only for now), extending the metric it already pushes on Instagram and Threads. The logic: with 50%+ of feed content now algorithm-recommended, follower counts and likes are weaker signals than views. Find out more

Musk Says He Will Open-Source the Entire X Codebase: After a security review, X will publish its full codebase "with no exceptions" and invite third-party reviewers. Familiar territory near-identical pledges in 2023 and earlier this year never fully materialised. Find out more

Ofcom Opens Investigation Into TikTok's Child-Protection Duties: The UK regulator is probing whether TikTok met its Online Safety Act Section 12 obligations one of the first enforcement tests of the new regime against a major platform. Find out more

Your Android Phone Warns You About Nearby AirTags: Apple and Google's joint unknown-tracker standard means Android 6.0+ devices auto-alert you when an AirTag or compatible tracker separated from its owner is travelling with you tap to map, ring or disable it, or run a manual sweep under Settings → Safety & Emergency. Apple | Android

Inside Pegasus - The Evolution of the World's Most Notorious Spyware: Amnesty's Security Lab published a deep technical teardown of how Pegasus has evolved over the years - delivery, persistence, and forensic traces. Essential reading for anyone doing mobile-threat or spyware investigation work. Find out more

Hacking Google With AI: Bug-bounty researcher brutecat chains together a series of vulnerabilities across Google's AI-powered features (Gemini included) a sharp read on how bolting AI onto everything quietly widens the attack surface. Find out more

[Method] Build a Human-in-the-Loop Knowledge Graph With Neo4j: A practical walkthrough of modelling OSINT findings as a graph database, with an analyst validating what gets added. Good if your investigations have outgrown spreadsheets. Find out more

The Secret History of Polymarket (Part 1): Unlimited Hangout kicks off an investigative series digging into the origins, backers and structure behind the prediction-market platform Polymarket. Find out more

Story-Based Inquiry (TCIJ Handbook): The CIJ's free handbook on structuring an investigation around a hypothesis: how to plan, verify and organise a story from first idea to publication. Find out more

Chinese OSINT Search Dork Collection (Argelius Labs): A practical guide to search operators and dorks for investigating Chinese-language sources handy if your research reaches into Baidu, Weibo and the wider Chinese web. Find out more

Ukraine Launches TrophyLab: Kyiv's MoD opened a secure platform giving allied governments, labs and defence manufacturers access to technical data, reports and vulnerabilities from captured Russian missiles, drones and vehicles. Partners can even request physical hardware for testing to speed up countermeasure development. Find out more

Google Images Turns 25 and Goes Full Pinterest: Marking its 25th anniversary, Google Images rolled out a redesigned "immersive" gallery with a Pinterest-style masonry layout and collections for saving images, plus AI image generation (Nano Banana model) directly in Search. Find out more

De-anonymising Tor Hidden Services: SOS Intelligence walks through how onion services blow their own cover through misconfiguration — exposed Apache mod_status, leftover phpinfo() pages, SSL certs logged in Certificate Transparency, and EXIF metadata — plus hardening tips for anyone running one. Find out more

Digital Threats in the Age of AI (Free, 6-week virtual): Craig Silverman is once again recruiting a new cohort of journalists for this free six-week course, which has already trained 100+ reporters worldwide to investigate online platforms, disinformation, trolling, inauthentic activity and deceptive websites. This year's trainers include Jane Lytvynenko, Etienne Maynier and Luis Assardo. Open to staff and freelance journalists everywhere; applications due August 7.

AFCEA TechNet Augusta Capture the Flag — Aug 17–18 (In-person + virtual): A jeopardy-style CTF at the Georgia Cyber Center or online, with an OSINT/PAI CTF on Aug 17 and the International Military & Collegiate CTF on Aug 18. Register by August 10.

US OSINT Symposium 2026 - Aug 5-6: Opening networking reception on Aug 5, followed by a full day of practitioner-led sessions on Aug 6, themed "Decision Advantage with OSINT" - moving open-source intelligence beyond collection into real impact. Register here

IJ Masterclass (AIJC × DW Akademie × Bellingcat): Three-day investigative journalism masterclass covering digital forensics, verification, and OSINT tools, held ahead of AIJC2026. November 7-9, Kenya. Apply by July 31. Apply

[Poland] The Hack Summit 2026 - Call for Papers: Tracks include Security in Software Development & DevSecOps. Submissions open until August 2. Event runs November 5 (online) and November 6 at PGE Narodowy in Warsaw. Submit