weekly-update

Troy Hunt's Weekly Update 526 discusses making HIBP AI/SI-first and reflects on the mainstream acceptance of "vibe coding," highlighting Linus Torvalds' comments dismissing rules against AI coding tools in the Linux kernel mailing list.

Troy Hunt 的 Weekly Update 525 讨论了关于 AI 导致数据泄露的炒作，指出目前证据显示大多数数据泄露仍由人为社会工程（如 vishing）造成，而非 AI 编排。

Troy Hunt's Weekly Update 524 covers two ShinyHunters-related arrests (Pepijn in the Netherlands and Saif in Jordan), reflecting the inevitable legal crackdown on the long-running cybercrime group, and introduces new blog sponsor Origin, an AI agent visibility and endpoint security tool.

Troy Hunt's weekly update from a Norwegian fjord covers ShinyHunters' trajectory targeting Cl0p and the FBI, and introduces Origin as a sponsor for AI agent monitoring tooling.

Troy Hunt discusses how AI's role in cybersecurity breaches is often misrepresented in media, highlighting that real incidents are less sensational than headlines suggest.

Troy Hunt's weekly update covers his busy week with talks on 3D printing and infosec, data breaches, and IoT projects, focusing on security and data integrity topics.

Troy Hunt shares his method for implementing an IoT door lock system using UniFi, highlighting key principles like main power, fail-secure design, local control, and manual override for residential settings.

This weekly update discusses the current state of cyber ransoms, highlighting how ransomware attacks are often conducted by inexperienced actors and the legal repercussions for breached companies.

Troy Hunt's weekly update podcast from Vietnam discusses the Brinks Home data breach, criticizing the company's FAQ for failing to answer basic incident response questions, and outlines the typical extortion pattern involving vishing and OAuth.

Sol-Engine weekly update announces integration of Sol Attention, a training-free sparse attention method for video diffusion, with full paper coming next week.

Troy Hunt's weekly update from Marrakech discusses the futility of trying to remove personal data from data brokers and addresses companies' misguided marketing efforts.

Troy Hunt's weekly podcast episode with Scott Helme, where they launch 'Why no Passkeys?', a successor to 'Why no HTTPS?' that encourages organizations to adopt passkeys for authentication.

Troy Hunt celebrates the milestone of 1,000 data breaches loaded into Have I Been Pwned, reflecting on the behind-the-scenes work involved.

Troy Hunt discusses the ongoing ShinyHunters data breaches and dumps, noting the criminality, organizational responses, and the seemingly endless cycle of new victims appearing, such as DentaQuest and BCD Travel.

Troy Hunt's weekly update reports that the ShinyHunters hacking group has resurfaced with new claims against DentaQuest and Charter Communications after a brief silence following the Instructure ransom payment.

Troy Hunt's weekly update discusses the normalization of ransomware payments, referencing Grafana's refusal to pay and Instructure's euphemistic 'agreement' with attackers, and criticizes the softening of language around criminal extortion.

Troy Hunt shares his experience using AI assistant 'Bruce' for customer support tickets, finding a sweet spot between full automation and human assistance.

In this weekly update, Troy Hunt discusses his observations of OpenClaw and the potential of agentic AI to change the world, noting that while much is hyperbolic, he has found useful applications.

Have I Been Pwned continues to evolve with serverless functions, edge code, and new data storage, making the platform faster and more cost-effective.