Iran

August 2026

August 2026


Vol. 9, Iss. 34
Robin’s Newsletter #427
Vol. 9, Iss. 34

Small UK power plant shutdown by Iranian group. AI firms promise better segregation, monitoring. 3.7M people affected by US health records breach.


Vol. 9, Iss. 32
Robin’s Newsletter #424
Vol. 9, Iss. 32

More AI agent incidents surface. Iranian attacks on US water expand. $88 million stolen via flaw in hardware cryptocurrency wallets.

July 2026

July 2026


Vol. 9, Iss. 31
Robin’s Newsletter #423
Vol. 9, Iss. 31

Anthropic says Claude broke into three orgs. Co-ordinated attack against 30 Minnesota water systems. Google Earth GenAI is a lesson in product design.


Vol. 9, Iss. 30
Robin’s Newsletter #423
Vol. 9, Iss. 30

OpenAI model goes rogue, breaks out of sandbox, into Hugging Face, overshadowing Google Gemini release.

May 2026

May 2026


Vol. 9, Iss. 21
Robin’s Newsletter #414
Vol. 9, Iss. 21

CISA credentials exposed in public repo. GitHub source code stolen. Iran wants to charge for Hormuz internet cables.

April 2026

April 2026


Vol. 9, Iss. 15
Robin’s Newsletter #408
Vol. 9, Iss. 15

Mythos madness. Russian DNS hijacking. US warns energy, water, of Iranian threat actors.


Vol. 9, Iss. 14
Robin’s Newsletter #407
Vol. 9, Iss. 14

Anthropic's source code leak. North Korea compromises popular JS library. What does Rowhammer mean for Nvidia GPUs in AI workloads?

March 2026

March 2026


Vol. 9, Iss. 13
Robin’s Newsletter #406
Vol. 9, Iss. 13

TeamPCP software supply-chain attacks widen, target Iran with crude wiper. US bans foreign-made routers. FBI director Kash Patel email's compromised.


Vol. 9, Iss. 12
Robin’s Newsletter #405
Vol. 9, Iss. 12

Delve compliance reports called into question. US evaluators lacked confidence in Microsoft cloud. Feds seize Iran-linked domains in Stryker attack.


Vol. 9, Iss. 11
Robin’s Newsletter #404
Vol. 9, Iss. 11

Iran-linked group retaliatory cyberattack against US med-tech co, Stryker. Malciious code hiding in the whitespace. Google completes Wiz acquisition.


Vol. 9, Iss. 10
Robin’s Newsletter #403
Vol. 9, Iss. 10

Iran war: cyber's role in blackouts, broadcasts, and CCTV. Plus LLMs make identifying pseudonymous profiles trivial.

July 2025

July 2025


Vol. 8, Iss. 28
Robin’s Newsletter #369
Vol. 8, Iss. 28

Four arrested in UK retail cyber attacks. Critical Citrix Bleed 2 vulnerability. Would you like fries with that? McDonald's 123456 password.


Vol. 8, Iss. 27
Robin’s Newsletter #368
Vol. 8, Iss. 27

Sinoloa cartel used compromised mobile devices, CCTV, to identify and kill FBI informants. Qantas breached by Scattered Spider. Canada bans Hikvision.

June 2025

June 2025


Vol. 8, Iss. 25
Robin’s Newsletter #366
Vol. 8, Iss. 25

Israeli/Iran cyberspace heating up. Scattered Spider turns to insurance industry. 23andMe fined £2.3M by ICO.

May 2025

May 2025


Vol. 8, Iss. 18
Robin’s Newsletter #359
Vol. 8, Iss. 18

Co-op, Harrods join M&S as victims of Scattered Spider breaches. Spanish power outage not a cyberattack. RDP lets you login with old creds.

April 2025

April 2025


Vol. 8, Iss. 16
Robin’s Newsletter #357
Vol. 8, Iss. 16

MITRE CVE funding secured, for now. Florida lawmakers want in on E2EE backdoor. Silicon Valley traffic crossings hacked to play spoof Zuck, Musk audio.

October 2024

October 2024


Vol. 7, Iss. 42
Robin’s Newsletter #331
Vol. 7, Iss. 42

Chinese accusations of Intel backdoors. Microsoft loses customer security logs. Hong Kong arrests in multi-milloin deepfake video scams.

September 2024

September 2024


Vol. 7, Iss. 37
Robin’s Newsletter #327
Vol. 7, Iss. 37

US dismantles massive Chinese botnet. Confidence testing questions for CISOs. Bumper load of interesting reads.


Vol. 7, Iss. 35
Robin’s Newsletter #324
Vol. 7, Iss. 35

Telegram CEO charged in France for illegal activity on the platform. Ukraine launches cyber range. Chinese attackers compromise four ISPs.

August 2024

August 2024


Vol. 7, Iss. 34
Robin’s Newsletter #323
Vol. 7, Iss. 34

US intel says Iran behind Trump campaign hack. Man hacks death register to get out of child support payments. How not to run a phishing test.


Vol. 7, Iss. 33
Robin’s Newsletter #322
Vol. 7, Iss. 33

Large data set published from US Data broker. Trump campaign blames Iran for leaked emails. Critical zero-click TCP/IP vulnerability in Windows.

December 2023

December 2023


Vol. 6, Iss. 52
Robin’s Newsletter #288
Vol. 6, Iss. 52

Predatory Sparrow disrupts 70% of Iran's petrol pumps. New SEC breach rules come into force. Authories seize APLHV dark web site.


Vol. 6, Iss. 49
Robin’s Newsletter #285
Vol. 6, Iss. 49

Iranian attack on US water facility. Chinese espionage group in Netherlands chip maker for years. US

September 2022

September 2022


Vol. 5, Iss. 37
Robin’s Newsletter #221
Vol. 5, Iss. 37

Ex-Uber CISO trial underway for bug bounty handling of data breach. UK, US, Albania condemn Iranian cyber-attacks. China accuses NSA of spying.

July 2022

July 2022


Vol. 5, Iss. 27
Robin’s Newsletter #211
Vol. 5, Iss. 27

'Hacktivists' execute cyber attack against Iranian steel works, 'mercenary hackers' swaying legal battles, and malicious insiders

February 2022

February 2022


Vol. 5, Iss. 6
Robin’s Newsletter #190
Vol. 5, Iss. 6

News Corp targeted in 'advanced persistent' attack. US launches Cyber Safety Review Board. One guy knocks North Korea off the 'net.

August 2021

August 2021


Vol. 4, Iss. 31
Robin’s Newsletter #163
Vol. 4, Iss. 31

Biden's 'real shooting war' comments. Amazon's €746M GDPR fine. Iran's fake social media profiles. Phantom flotillas.

July 2020

July 2020


Vol. 3, Iss. 27
Robins Newsletter #107
Vol. 3, Iss. 27

Encrochat and evolving law enforcement tactics prove there is a different want to encryption backdoors. Explosion at Natanz doesn't mean 'Stuxnet 2.' And, don't host your website on Internet Archive.

June 2020

June 2020


Vol. 3, Iss. 23
Robins Newsletter #103
Vol. 3, Iss. 23

REvil launch auction site, while Maze and LockBit team up to pool resources, know-how. Plus inside a BEC scam and DROP DATABASE tickets.