The DOT Report

The DOT Report reviews the biggest stories and headlines in the cybersecurity space eachmonth. 

This month, we cover the attack that turned refrigeration controllers against hundreds of Frenchsupermarkets, a federal crackdown that dismantled more than 40 North Korean laptop farms inTexas, extortion charges against a prominent ransomware negotiator, and a CenterPointEnergy breach affecting more than a million Texans. We also examine a zero-day chain thatcompromised a fully patched Ivanti VPN appliance, the latest surge in the GhostActioncampaign on GitHub, Anthropic's warning about small AI models spreading across IoT devices,and the universities expanding AI security education.

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. 

In this episode, we break down the FBI's investigation into ShinyHunters' claims that it breached bureau systems, the public-private operation that took down the 23-year-old Sality botnet, a maximum-severity GitLab vulnerability that attackers began probing within a day of its patch, and research into how autonomous AI agents chain credentials and tools to reach systems beyond their direct permissions. 

We also examine the Coast Guard and FBI boardings of two Texas-bound oil tankers suspected of cyber compromise, a state-level report on funding gaps in critical infrastructure protection, OpenAI's $1 billion Daybreak program for frontline defenders, and CLOSEDQUORUM, a Windows malware strain designed to let AI models vote on its next action. 

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. 

Our August edition covers a wave of AI-powered hacking tools now for sale on underground forums, a newly confirmed data-extortion breach tied to a misconfigured Microsoft platform, and a controversial plan to let vetted private companies strike back at cybercriminal gangs directly. We also examine a cyber insurer's midyear report showing a sharp rise in AI-assisted phishing losses, a wave of extortion attacks targeting private equity firms tied to former BlackFile affiliates, a new strain of Android malware built for contactless payment fraud, a multimillion-dollar business built around recycled domain names, and a volunteer program helping small, rural water utilities improve their cybersecurity defenses. 

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month.  

Our July edition covers a ransomware attack that disrupted Coca-Cola's Fairlife dairy production operations, a healthcare data breach at Craneware impacting more than 700,000 individuals, and a security incident involving Accenture that exposed source code and access credentials. We also examine a critical Zoom vulnerability alongside other major software updates from Mozilla, Google, Adobe, and VMware, the discovery of malicious AI models hosted on Hugging Face, a $78,000 bug bounty awarded by Meta, and the Department of Defense's decision to pause the next phase of CMMC requirements.

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. Our June edition covers federal warnings about attackers targeting industrial monitoring systems used across critical infrastructure, growing cyber threat concerns surrounding the 2026 FIFA World Cup, identity visibility challenges highlighted by new research, and Accenture's $4.1 billion investment in operational technology security. We also examine critical NGINX vulnerabilities that prompted emergency patches, the emerging role of AI agents in offensive cyber operations, a massive compilation of 24 billion stolen records, and Kodak's confirmed breach linked to the ShinyHunters threat group. 

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. Our May edition covers a major breach involving the Canvas learning platform and the controversial response that followed, an INTERPOL operation targeting cybercrime networks across the MENA region, supply chain incidents involving GitHub and Grafana Labs exposing internal development environments and source code, a surge in identity-driven and OAuth-based phishing attacks, a large-scale Android ad fraud operation, and growing efforts to strengthen critical infrastructure resilience.

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. 

Our April edition covers concerns around restricted AI systems being accessed outside intended controls, a confirmed breach at Vercel tied to a third-party integration, an international takedown of a global phishing platform, a social engineering-driven breach affecting Hims & Hers, and rising cyber risk tied to global events like the Olympics and World Cup. 

Then we’ll get into warnings around large-scale hacktivist attacks in the UK, ongoing security gaps across the entertainment industry, and a groundbreaking federal case involving cybersecurity professionals accused of working with ransomware actors.

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. 

Our March edition covers a device code phishing campaign impacting Microsoft 365 organizations, a hacker sentenced for enabling ransomware attacks, CISA warnings on actively exploited Apple and web application flaws, a DOJ disruption of massive IoT botnets, a new U.S. energy cybersecurity strategy, the takedown of the Tycoon 2FA phishing platform, a cyberattack affecting Stryker, and Google’s $32 billion acquisition of Wiz. 

The DOT Report reviews the biggest stories and headlines in the cybersecurityspace each month. Our February edition covers an AI-assisted campaign thatcompromised more than 600 FortiGate firewalls worldwide, CISA’s reorganization of itsCybersecurity Division, a Ukrainian national sentenced in a U.S. identity fraud case, aclaimed Wendy’s franchise data breach, a BeyondTrust flaw used to deploy web shells, anINTERPOL operation resulting in multiple cybercrime arrests, malicious fake IPTV appsspreading Android malware, and new research showing AI agents routinely ignore security

The DOT Report reviews the biggest stories and headlines in the cybersecurity space each month. Our January edition covers Europol’s arrest of dozens of Black Axe cybercrime members, a newly disclosed attack technique targeting Microsoft Copilot, malicious AI-powered developer tools and browser extensions stealing source code, emerging methods for hacking vehicles and EV infrastructure, an actively exploited email server authentication bypass, a critical flaw in the AWS console that risked build environment compromise, fake AI Chrome extensions harvesting user data, and ongoing healthcare breaches despite strengthened defenses.