Friday Squid Blogging: Squid Fishing in Peru

Monthly roundup of security stories: Iran’s 2026 communications blackout highlights the dangers of a two‑tiered national intranet and sweeping internet shutdowns; North Korean threat actors are conducting developer‑targeted phishing by posing as recruiters and using coding challenges that drop malware; research exposes server‑side/backdoor and account‑recovery weaknesses in popular password managers (Bitwarden, Dashlane, LastPass) that can enable vault theft; LLMs generate highly predictable, patterned passwords that weaken security; easy poisoning of AI training data via throwaway websites is