https://preview.redd.it/d4tnnhqzbcfh1.png?width=2816&format=png&auto=webp&s=4f613dbae508291f930dcdffcce3c32bf749868b

OpenAI / Hugging Face
takes this week's “well, that escalated quickly” award. During an internal cyber-capability test, OpenAI models found a zero-day in their isolated environment, escaped onto the open internet, moved through internal systems, and eventually compromised Hugging Face infrastructure looking for secret answers to the benchmark. One attack path reportedly chained stolen credentials, additional zero-days, and remote code execution. The test subjects basically broke out of the exam room and robbed the answer bank.

Romania’s land registry
got hit hard enough to jam up real-estate transactions across the country. Notaries were unable to issue property records, authenticate sales, or register mortgages while officials rebuilt and restored systems. Some stolen data also appeared for sale online. Imagine finally finding an affordable house, only for the entire country’s property database to pull a 404 on you.

Shame, shame, I know your name: Suno.
Have I Been Pwned added a breach containing data from 55.3 million accounts, including email addresses, names, phone numbers, purchase records, physical addresses, and limited payment-card details. The intrusion actually happened in November 2025 but only surfaced this month!!! The AI music company got sampled, remixed, and released without clearance.

How to stay on top of your game:
Sandbox anything with offensive capability like it is actively trying to leave, keep tested offline backups for systems that society cannot function without, and never recycle passwords across entertainment or AI platforms. This week’s lesson: the model may escape, the database may disappear, and yesterday’s quiet breach may become tomorrow’s 55-million-user headline.

...Wanna know more?
Click on any of the blue headers above to access related news articles!

Thanks for giving us a gander this week, readers.
We appreciate your eyes and commentary!

Last week's cybermadness: Coca-Cola’s milk business got ransomware’d, Japan’s frozen-food supply chain caught a digital haymaker, and Mac malware learned how to throw a full-blown temper-tantrum.

Coca-Cola / Fairlife took the dairy-sector gut punch. Coca-Cola confirmed that ransomware hit Fairlife’s production-related systems and temporarily suspended U.S. production. Product safety was reportedly unaffected, but “hackers stopped the milk factory” is still one hell of a sentence.

Over in Japan, a cyberattack on refrigerated-food giant Nichirei disrupted warehouse and shipping operations, dragging KFC Japan, Kura Sushi, supermarkets, ice cream, and other frozen goods into the mess. Cybercrime has officially reached the “leave the fried chicken out of this” phase.

Then there’s ClickLock, a nasty new macOS stealer. Victims are tricked into pasting a fake verification command into Terminal. If they refuse to enter their password, the malware repeatedly kills their apps until the desktop is basically unusable. Give in, and it starts digging through browser credentials, Keychain data, password managers, and crypto wallets. Petty, aggressive, and rude as hell.

How to stay on top of your game: keep production and logistics systems segmented, verify software prompts before touching Terminal, and never paste commands from a website just because a fake Cloudflare box tells you to.
This week’s lesson is pretty simple, ya'll: ransomware can stop the milk, a warehouse outage can threaten dinner, and one bad copy-paste can turn your Mac against you.

Wanna read more? Coca-Cola on Fairlife | Japan Times on Nichirei | Group-IB on ClickLock

This week's cybermadness: Coca-Cola’s milk business got ransomware’d, Japan’s frozen-food supply chain caught a digital haymaker, and Mac malware learned how to throw a full-blown temper-tantrum.

Coca-Cola / Fairlife took the dairy-sector gut punch. Coca-Cola confirmed that ransomware hit Fairlife’s production-related systems and temporarily suspended U.S. production. Product safety was reportedly unaffected, but “hackers stopped the milk factory” is still one hell of a sentence.

Over in Japan, a cyberattack on refrigerated-food giant Nichirei disrupted warehouse and shipping operations, dragging KFC Japan, Kura Sushi, supermarkets, ice cream, and other frozen goods into the mess. Cybercrime has officially reached the “leave the fried chicken out of this” phase.

Then there’s ClickLock, a nasty new macOS stealer. Victims are tricked into pasting a fake verification command into Terminal. If they refuse to enter their password, the malware repeatedly kills their apps until the desktop is basically unusable. Give in, and it starts digging through browser credentials, Keychain data, password managers, and crypto wallets. Petty, aggressive, and rude as hell.

How to stay on top of your game: keep production and logistics systems segmented, verify software prompts before touching Terminal, and never paste commands from a website just because a fake Cloudflare box tells you to.
This week’s lesson is pretty simple, ya'll: ransomware can stop the milk, a warehouse outage can threaten dinner, and one bad copy-paste can turn your Mac against you.

Wanna read more? Coca-Cola on Fairlife | Japan Times on Nichirei | Group-IB on ClickLock

This week's cybermadness: Coca-Cola’s milk business got ransomware’d, Japan’s frozen-food supply chain caught a digital haymaker, and Mac malware learned how to throw a full-blown temper-tantrum.

Coca-Cola / Fairlife took the dairy-sector gut punch. Coca-Cola confirmed that ransomware hit Fairlife’s production-related systems and temporarily suspended U.S. production. Product safety was reportedly unaffected, but “hackers stopped the milk factory” is still one hell of a sentence.

Over in Japan, a cyberattack on refrigerated-food giant Nichirei disrupted warehouse and shipping operations, dragging KFC Japan, Kura Sushi, supermarkets, ice cream, and other frozen goods into the mess. Cybercrime has officially reached the “leave the fried chicken out of this” phase.

Then there’s ClickLock, a nasty new macOS stealer. Victims are tricked into pasting a fake verification command into Terminal. If they refuse to enter their password, the malware repeatedly kills their apps until the desktop is basically unusable. Give in, and it starts digging through browser credentials, Keychain data, password managers, and crypto wallets. Petty, aggressive, and rude as hell.

How to stay on top of your game: keep production and logistics systems segmented, verify software prompts before touching Terminal, and never paste commands from a website just because a fake Cloudflare box tells you to.
This week’s lesson is pretty simple, ya'll: ransomware can stop the milk, a warehouse outage can threaten dinner, and one bad copy-paste can turn your Mac against you.

Wanna read more? Further reading: Coca-Cola on Fairlife | Japan Times on Nichirei | Group-IB on ClickLock

Phil J Fry was a PHREAKER! lol

Before the internet, before personal computers, and before cybersecurity became a global industry, there was another network that captured the imagination of curious minds: the telephone system.

Unlike today's digital networks, early telephone systems were almost entirely analog. Voices were converted into electrical signals that traveled over physical wires, while specialized switching equipment determined the path each call would take.

To coordinate these connections, the network relied on a series of audible control tones. These tones instructed the switching equipment when to open a circuit, close a circuit, or route a call to another exchange. Because these commands traveled over the same lines as human voices—a method known as in-band signaling—they could sometimes be reproduced by someone outside the telephone company.

It was this design that gave rise to phone phreaking, as curious individuals discovered that by generating the right tones, they could interact directly with the telephone network itself. (Get your mind out of the gutters, it's phreaking, not freaking ;))

For curious individuals, this presented an opportunity.

By reproducing specific frequencies, phone phreaks discovered they could interact directly with the telephone network itself—routing calls, exploring its infrastructure, and, in many cases, making unauthorized long-distance calls.

The most famous of these tones was 2,600 Hz.

The Boy Who Could Whistle to the Telephone Network

One of the earliest and most legendary figures in phone phreaking was Joe Engressia Jr., later known as Joybubbles. Blind from birth and blessed with perfect pitch, Engressia discovered as a child that he could whistle a precise 2,600 Hz tone. To his amazement, the telephone system responded.

The whistle caused parts of the long-distance network to believe a call had ended while leaving the communication line open. With enough knowledge, additional signaling tones could then instruct the network where to route the call next.

While the system was never designed to accept commands from ordinary users, it had no way of distinguishing between tones generated by telephone equipment and those produced by a remarkably accurate whistle.

This accidental discovery revealed one of the first major vulnerabilities in a large-scale communications network. (Ding ding ding- is your cybersecurity bell ringing at this?!)

Enter the Blue Box

As phone phreaking evolved, enthusiasts began building electronic devices capable of generating the exact signaling tones used by the telephone network. These devices became known as blue boxes. (I think the next article I write about should be on blue boxes- what do you think??) Rather than relying on perfect pitch, blue boxes allowed users to reproduce the full range of control tones required to navigate the long-distance telephone system.

For many, the appeal wasn't simply free calls.

The network itself became a puzzle to solve—a vast, interconnected system whose inner workings were hidden from the public. Phone phreaks mapped exchanges, documented signaling protocols, and shared discoveries with one another, forming one of the earliest technical communities dedicated to understanding complex infrastructure. (Much like my fellow cyber sec redditors :))

From Phone Lines to Computer Networks

As computers became more common during the 1970s and 1980s, many phone phreaks naturally transitioned into computer hacking. The skills transferred surprisingly well.

Understanding signaling protocols became understanding network protocols. Exploring telephone exchanges became exploring computer systems. Manipulating analog infrastructure became reverse engineering software and operating systems. The target changed, but the curiosity remained the same.

Some of the earliest computer security communities even overlapped with the phone phreak community, with members exchanging techniques and knowledge through bulletin board systems (BBSs).

One of the most famous stories in computing history involves two young college students fascinated by phone phreaking. Before founding Apple, Steve Wozniak designed his own blue box after learning about the phone phreak community. Alongside his friend Steve Jobs, the pair built and sold blue boxes to fellow students.

The End of an Era

By the late 1970s and early 1980s, telephone companies began replacing vulnerable analog signaling with out-of-band signaling systems that separated control information from voice traffic. The most significant of these was Signaling System No. 7 (SS7), which largely eliminated the weaknesses exploited by classic phone phreaks.

As the analog era faded, so too did traditional phone phreaking, but its influence never disappeared.

The Legacy in Modern Cybersecurity

Today's cybersecurity professionals perform penetration tests instead of experimenting with telephone exchanges. Researchers analyze software rather than analog switches. Bug bounty hunters responsibly disclose vulnerabilities instead of publishing signaling diagrams.

Yet the philosophy remains remarkably similar.

Modern cybersecurity depends on people who ask difficult questions*, "What happens if this system behaves differently than its designers expected?"* That question drove the phone phreaks. It drives security researchers today.

Phone phreaking wasn't simply about making free phone calls. It demonstrated an idea that remains fundamental to cybersecurity: every complex system contains assumptions, and those assumptions can be tested.

The phone phreaks were among the first people to treat technology as something to be explored rather than simply used. In doing so, they helped create the culture that would eventually give rise to ethical hacking, penetration testing, vulnerability research, and modern cybersecurity itself.

Long before firewalls, ransomware, and zero-day exploits, there were curious minds with nothing more than a telephone, a whistle, and an irresistible desire to understand how the world worked.

Here's some questions I had while learning about phone phreaking, please do join in on the discussion 😄

-When does “exploring a system” become “breaking into a system”?
-How do you think the designers of the telephone system would have responded to people experimenting with it in this way? (I could almost argue that their response is the foundation of 'blue/purple teamers')
-Were early phone phreaks more like engineers, activists, or criminals? (personally , i think of them as just hobbyist)

Before the internet, before personal computers, and before cybersecurity became a global industry, there was another network that captured the imagination of curious minds: the telephone system.

Unlike today's digital networks, early telephone systems were almost entirely analog. Voices were converted into electrical signals that traveled over physical wires, while specialized switching equipment determined the path each call would take.

To coordinate these connections, the network relied on a series of audible control tones. These tones instructed the switching equipment when to open a circuit, close a circuit, or route a call to another exchange. Because these commands traveled over the same lines as human voices—a method known as in-band signaling—they could sometimes be reproduced by someone outside the telephone company.

It was this design that gave rise to phone phreaking, as curious individuals discovered that by generating the right tones, they could interact directly with the telephone network itself. (Get your mind out of the gutters, it's phreaking, not freaking ;))

For curious individuals, this presented an opportunity.

By reproducing specific frequencies, phone phreaks discovered they could interact directly with the telephone network itself—routing calls, exploring its infrastructure, and, in many cases, making unauthorized long-distance calls.

The most famous of these tones was 2,600 Hz.

The Boy Who Could Whistle to the Telephone Network

One of the earliest and most legendary figures in phone phreaking was Joe Engressia Jr., later known as Joybubbles. Blind from birth and blessed with perfect pitch, Engressia discovered as a child that he could whistle a precise 2,600 Hz tone. To his amazement, the telephone system responded.

The whistle caused parts of the long-distance network to believe a call had ended while leaving the communication line open. With enough knowledge, additional signaling tones could then instruct the network where to route the call next.

While the system was never designed to accept commands from ordinary users, it had no way of distinguishing between tones generated by telephone equipment and those produced by a remarkably accurate whistle.

This accidental discovery revealed one of the first major vulnerabilities in a large-scale communications network. (Ding ding ding- is your cybersecurity bell ringing at this?!)

Enter the Blue Box

As phone phreaking evolved, enthusiasts began building electronic devices capable of generating the exact signaling tones used by the telephone network. These devices became known as blue boxes. (I think the next article I write about should be on blue boxes- what do you think??) Rather than relying on perfect pitch, blue boxes allowed users to reproduce the full range of control tones required to navigate the long-distance telephone system.

For many, the appeal wasn't simply free calls.

The network itself became a puzzle to solve—a vast, interconnected system whose inner workings were hidden from the public. Phone phreaks mapped exchanges, documented signaling protocols, and shared discoveries with one another, forming one of the earliest technical communities dedicated to understanding complex infrastructure. (Much like my fellow cyber sec redditors :))

From Phone Lines to Computer Networks

As computers became more common during the 1970s and 1980s, many phone phreaks naturally transitioned into computer hacking. The skills transferred surprisingly well.

Understanding signaling protocols became understanding network protocols. Exploring telephone exchanges became exploring computer systems. Manipulating analog infrastructure became reverse engineering software and operating systems. The target changed, but the curiosity remained the same.

Some of the earliest computer security communities even overlapped with the phone phreak community, with members exchanging techniques and knowledge through bulletin board systems (BBSs).

One of the most famous stories in computing history involves two young college students fascinated by phone phreaking. Before founding Apple, Steve Wozniak designed his own blue box after learning about the phone phreak community. Alongside his friend Steve Jobs, the pair built and sold blue boxes to fellow students.

The End of an Era

By the late 1970s and early 1980s, telephone companies began replacing vulnerable analog signaling with out-of-band signaling systems that separated control information from voice traffic. The most significant of these was Signaling System No. 7 (SS7), which largely eliminated the weaknesses exploited by classic phone phreaks.

As the analog era faded, so too did traditional phone phreaking, but its influence never disappeared.

The Legacy in Modern Cybersecurity

Today's cybersecurity professionals perform penetration tests instead of experimenting with telephone exchanges. Researchers analyze software rather than analog switches. Bug bounty hunters responsibly disclose vulnerabilities instead of publishing signaling diagrams.

Yet the philosophy remains remarkably similar.

Modern cybersecurity depends on people who ask difficult questions*, "What happens if this system behaves differently than its designers expected?"* That question drove the phone phreaks. It drives security researchers today.

Phone phreaking wasn't simply about making free phone calls. It demonstrated an idea that remains fundamental to cybersecurity: every complex system contains assumptions, and those assumptions can be tested.

The phone phreaks were among the first people to treat technology as something to be explored rather than simply used. In doing so, they helped create the culture that would eventually give rise to ethical hacking, penetration testing, vulnerability research, and modern cybersecurity itself.

Long before firewalls, ransomware, and zero-day exploits, there were curious minds with nothing more than a telephone, a whistle, and an irresistible desire to understand how the world worked.

Here's some questions I had while learning about phone phreaking, please do join in on the discussion 😄

-When does “exploring a system” become “breaking into a system”?
-How do you think the designers of the telephone system would have responded to people experimenting with it in this way? (I could almost argue that their response is the foundation of 'blue/purple teamers')
-Were early phone phreaks more like engineers, activists, or criminals? (personally , i think of them as just hobbyist)

Before the internet, before personal computers, and before cybersecurity became a global industry, there was another network that captured the imagination of curious minds: the telephone system.

Unlike today's digital networks, early telephone systems were almost entirely analog. Voices were converted into electrical signals that traveled over physical wires, while specialized switching equipment determined the path each call would take.

To coordinate these connections, the network relied on a series of audible control tones. These tones instructed the switching equipment when to open a circuit, close a circuit, or route a call to another exchange. Because these commands traveled over the same lines as human voices—a method known as in-band signaling—they could sometimes be reproduced by someone outside the telephone company.

It was this design that gave rise to phone phreaking, as curious individuals discovered that by generating the right tones, they could interact directly with the telephone network itself. (Get your mind out of the gutters, it's phreaking, not freaking ;))

For curious individuals, this presented an opportunity.

By reproducing specific frequencies, phone phreaks discovered they could interact directly with the telephone network itself—routing calls, exploring its infrastructure, and, in many cases, making unauthorized long-distance calls.

The most famous of these tones was 2,600 Hz.

The Boy Who Could Whistle to the Telephone Network

One of the earliest and most legendary figures in phone phreaking was Joe Engressia Jr., later known as Joybubbles. Blind from birth and blessed with perfect pitch, Engressia discovered as a child that he could whistle a precise 2,600 Hz tone. To his amazement, the telephone system responded.

The whistle caused parts of the long-distance network to believe a call had ended while leaving the communication line open. With enough knowledge, additional signaling tones could then instruct the network where to route the call next.

While the system was never designed to accept commands from ordinary users, it had no way of distinguishing between tones generated by telephone equipment and those produced by a remarkably accurate whistle.

This accidental discovery revealed one of the earliest widely recognized vulnerabilities in a large-scale communications network. (Ding ding ding- is your cybersecurity bell ringing at this?!)

Enter the Blue Box

As phone phreaking evolved, enthusiasts began building electronic devices capable of generating the exact signaling tones used by the telephone network. These devices became known as blue boxes. (I think the next article I write about should be on blue boxes- what do you think??) Rather than relying on perfect pitch, blue boxes allowed users to reproduce the full range of control tones required to navigate the long-distance telephone system.

For many, the appeal wasn't simply free calls.

The network itself became a puzzle to solve—a vast, interconnected system whose inner workings were hidden from the public. Phone phreaks mapped exchanges, documented signaling protocols, and shared discoveries with one another, forming one of the earliest technical communities dedicated to understanding complex infrastructure. (Much like my fellow cyber sec redditors :))

From Phone Lines to Computer Networks

As computers became more common during the 1970s and 1980s, many phone phreaks naturally transitioned into computer hacking. The skills transferred surprisingly well.

Understanding signaling protocols became understanding network protocols. Exploring telephone exchanges became exploring computer systems. Manipulating analog infrastructure became reverse engineering software and operating systems. The target changed, but the curiosity remained the same.

Some of the earliest computer security communities even overlapped with the phone phreak community, with members exchanging techniques and knowledge through bulletin board systems (BBSs).

One of the most famous stories in computing history involves two young college students fascinated by phone phreaking. Before founding Apple, Steve Wozniak designed his own blue box after learning about the phone phreak community. Alongside his friend Steve Jobs, the pair built and sold blue boxes to fellow students.

The End of an Era

Beginning in the late 1970s—and accelerating throughout the 1980s and 1990s—telephone companies gradually modernized their networks by replacing in-band signaling with out-of-band signaling systems that separated control information from voice traffic. One of the most significant developments was the widespread adoption of Signaling System No. 7 (SS7), which moved network control information off the voice channel and greatly reduced the vulnerabilities exploited by classic phone phreaking.

This transition didn't happen overnight. Different carriers, regions, and even individual payphone models were upgraded at different times. Some legacy equipment remained in service for years, meaning certain phone phreaking techniques continued to work in some places long after they had disappeared in others. (in some cases, the red box tones could still be used up until about 2010!)

As older switches, ACTS systems, and legacy payphones were gradually retired, traditional phone phreaking slowly faded away—but its influence never disappeared.

The Legacy in Modern Cybersecurity

Today's cybersecurity professionals perform penetration tests instead of experimenting with telephone exchanges. Researchers analyze software rather than analog switches. Bug bounty hunters responsibly disclose vulnerabilities instead of publishing signaling diagrams.

Yet the philosophy remains remarkably similar.

Modern cybersecurity depends on people who ask difficult questions: "What happens if this system behaves differently than its designers expected?" That question drove the phone phreaks. It drives security researchers today.

Phone phreaking wasn't simply about making free phone calls. It demonstrated an idea that remains fundamental to cybersecurity: every complex system contains assumptions, and those assumptions can be tested.

The phone phreaks were among the first people to treat technology as something to be explored rather than simply used. In doing so, they helped create the culture that would eventually give rise to ethical hacking, penetration testing, vulnerability research, and modern cybersecurity itself.

Long before firewalls, ransomware, and zero-day exploits, there were curious minds with nothing more than a telephone, a whistle, and an irresistible desire to understand how the world worked. While the technology eventually changed, that curiosity—and the desire to understand complex systems—became one of the foundations of modern cybersecurity.

Here's some questions I had while learning about phone phreaking. Please do join in on the discussion! 😄

• When does "exploring a system" become "breaking into a system"?
• How do you think the designers of the telephone system would have responded to people experimenting with it in this way? (I could almost argue that their response laid the groundwork for today's blue and purple teams.)
• Were early phone phreaks more like engineers, activists, or criminals? (Personally, I tend to think of many of them as curious hobbyists.)

Does anyone else think that AI will completely wipe out the need for (human) Bug Bounty Hunters in the near future, or do you think that due to the ever-evolving threat landscape... AI-augmented toolsets will become an indispensable accessory for "Bug hunting" in the future?