Rory Bernier
@RoryCrave

AI Red Teamer & Product Strategist | LLM & Agent Security • Zero-Trust | Building verifiable AI systems | Clarity Foundry

 Norwalk, CT
clarityfoundry.online
Joined February 2023
4,759 Photos and videos
Insights from the 2026 Microsoft Digital Defense Report  microsoft.com/en-us/security…

Insights from the 2026 Microsoft Digital Defense Report  | Microsoft Security Blog

Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected.

microsoft.com
55
Preparing governments for an era of interconnected cyber risk blogs.microsoft.com/on-the-i…

Preparing governments for an era of interconnected cyber risk - Microsoft On the Issues

Explore five cybersecurity priorities governments can take to strengthen resilience, secure AI systems, protect essential services, and prepare for evolving cyber threats.

blogs.microsoft.com
18
Hackers stole millions of US military personnel records during months-long data breach techcrunch.com/2026/09/30/ha… via @techcrunch

Hackers stole millions of US military personnel records during months-long data breach | TechCrunch

The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.

techcrunch.com
31
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 microsoft.com/en-us/security…

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570 |...

Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportunities, and mitigation guidance.

microsoft.com
42
Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site europol.europa.eu/media-pres…

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak...

On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten...

europol.europa.eu
41
Mississippi mayor says ransomware incident led city to shut down systems therecord.media/vicksburg-mi… @TheRecord_Media

Mississippi mayor says ransomware incident led city to shut down systems

Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.

therecord.media
51
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries therecord.media/warlock-rans… @TheRecord_Media

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking...

The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.

therecord.media
24
Teenager arrested in Spain suspected of leading KillSec ransomware group scworld.com/brief/teenager-a…

Teenager arrested in Spain suspected of leading KillSec ransomware group

Spanish police have arrested a 16-year-old suspected of leading the KillSec ransomware group, which is accused of stealing data and threatening to publish it unless ransoms were paid.

scworld.com
29
Spanish Police Arrest 16-Year-Old Accused of Running KillSec Ransomware Group (via @decryptmedia) decrypt.co/379913/spanish-po…

Spanish Police Arrest 16-Year-Old Accused of Running KillSec Ransomware Group - Decrypt

A second suspect faces extradition to Puerto Rico, while Investigators are tracing the proceeds of ransoms the group demanded in crypto.

decrypt.co
22
China-Linked TA419 Hackers Target US AI Policy Experts With Credential Phishing Attacks gbhackers.com/china-linked-t… via @GBHackers Security | #1 Globally Trusted Cyber Security News Platform

China-Linked TA419 Hackers Target US AI Policy Experts With Credential Phishing Attacks

A China-linked threat actor known as TA419 has targeted U.S. artificial intelligence policy specialists through highly customized credential-phishing operations.

gbhackers.com
20
China-Linked Hackers Target U.S. AI Experts With Browser-in-the-Browser Phishing cyberpress.org/china-linked-…

China-Linked Hackers Target U.S. AI Experts With Browser-in-the-Browser Phishing

A China-aligned cyber espionage group tracked as TA419 has launched credential-phishing campaigns against U.S. artificial intelligence policy experts, impersonating prominent economists, former White...

cyberpress.org
19
China-Linked Hackers Impersonate Ex-U.S. Officials to Target AI Experts securityboulevard.com/2026/1…

China-Linked Hackers Impersonate Ex-U.S. Officials to Target AI Experts

China-nexus threat group TA419 is impersonating ex-U.S. policy makers in a credential-phishing campaign targeting AI experts in think tanks, universities, and similar organizations to collect...

securityboulevard.com
9
AI Agent Hacked Cybersecurity Nonprofit DIVD via Zammad Zero-Days; Root Flaw Unpatched techtimes.com/articles/32838…

AI Agent Hacked Cybersecurity Nonprofit DIVD via Zammad Zero-Days; Root Flaw Unpatched

Zammad zero-day vulnerabilities CVE-2026-102489 and CVE-2026-102490 were chained by an autonomous AI agent to breach cybersecurity nonprofit DIVD on September 21, 2026, reaching root access in...

techtimes.com
18
An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad Zero-Days forkast.news/an-autonomous-a…

An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad...

The Dutch Institute for Vulnerability Disclosure spent seven years reporting flaws in other people's systems. Then an AI agent found two zero-days in its own ticketing platform and chained them to...

forkast.news
23
AI agent exploits zero-day flaws in Zammad ticketing system scworld.com/brief/ai-agent-e…

AI agent exploits zero-day flaws in Zammad ticketing system

The Dutch Institute for Vulnerability Disclosure (DIVD) has reported a significant network breach facilitated by an autonomous AI agent that exploited two zero-day vulnerabilities in the open-source...

scworld.com
19
AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit helpnetsecurity.com/2026/10/…

AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit - Help Net...

An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two Zammad zero-days.

helpnetsecurity.com
1
69
Daily Recap, AI security coverage focused on a China-linked phishing campaign targeting AI policy circles, while OpenAI and Anthropic face an FTC probe and new research examined how AI changes vulnerability discovery, distillation attacks, ... hendryadrian.com/?p=114789

Cybersecurity News | Daily Recap [01 Oct 2026]

Daily Recap, AI security coverage focused on a China-linked phishing campaign targeting AI policy circles, while OpenAI and Anthropic face an FTC probe and new research examined how AI changes...

hendryadrian.com
1
1
48
Citrix Zero-Days Land CVSS 9.5, CISA Deadline Blown [2026] shattered.io/citrix-netscale…

Citrix NetScaler CVE-2026-88772 Zero-Day: CVSS 9.5, CISA KEV

CISA added Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 to its KEV catalog with CVSS 9.5 scores. The Sept. 30 patch deadline has passed.

shattered.io
198
Advanced, suspected state-sponsored threat actors are likely behind initial intrusions exploiting CVE-2026-88772 in Citrix NetScaler ADCs and Gateways, with dozens of organizations impacted across North America and Europe. Mandiant and GTIG... hendryadrian.com/?p=114528

Suspected State-sponsored Hackers Exploited NetScaler Zero-day Since Early September (CVE-2026-88...

Advanced, suspected state-sponsored threat actors are likely behind initial intrusions exploiting CVE-2026-88772 in Citrix NetScaler ADCs and Gateways, with dozens of organizations impacted across...

hendryadrian.com
209
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772) helpnetsecurity.com/2026/09/…

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88...

Advanced threat actor exploited CVE-2026-88772, one of the two recently disclosed NetScaler zero-day flaws, for weeks.

helpnetsecurity.com
109
Load more