The Breach Brief
Zero-days, mobile security exploits, supply chain attacks, and agentic offensive security research, delivered to your inbox every two weeks.
Latest issue
Japanese lawmakers call the wave of data breaches an emergency. Inside: the ShopServe, Sourcenext and Burger King Japan breaches, how attackers used AI to find APIs to attack, and a Metabase password-reset takeover.
Read the issue
A nine-month exposure and a pre-auth RCE chain show what happens when file-sharing systems turn into invisible infrastructure. Includes the DMDC breach and a ShareFile Storage Zone Controller RCE breakdown.
How AI agents are moving vulnerability research from plausible findings to reproducible proof. Includes CyberGym execution data and BragJack analysis.
When code is generated in seconds, the bottleneck shifts to the test suite, execution safety and the person responsible for the result.
How an internal review policy created an accidental disclosure pipeline and what security teams can do about it.
Inside the market for premium mobile zero-days and why the economics of exploit brokerage are shifting.
When security controls charge full price but adversaries find the 90% coupon to walk around them.
Tracing supply-chain tamper evidence and why physical packaging mattered for hardware security.
Why running 500 scans a day is not security—and what a mature, signal-driven pipeline looks like.
Budget pentesting versus deep offensive security testing: the hidden cost of false reassurance.
Stale OAuth tokens, lingering sessions and the architectural ghosts inside modern SaaS stacks.
Never miss an issue
Teardowns of active mobile exploits, offensive AI research, and actionable defensive insights, every two weeks.