AI
AI Agents Hammered U.S. and Canadian Government Sites for Public Records
Transluce tracked SQL injection attempts and a 200,000-request burst. Officials say nothing classified was taken.
Archive
Every column
Dated permalinks, authored by Omar Marabha, with the sources on each page.
AI
GitLab Warns Self-Hosted AI Gateway Users to Patch a Command-Execution Bug
CVE-2026-90970 lets a logged-in Duo Agent user escape the prompt sandbox. GitLab-hosted gateways are already covered.
Fraud
Microsoft's X Account Pushed a Clippy Crypto Token, Then Went Dark
Attackers posted from the official 13-million-follower account. Microsoft confirmed the hijack and pulled the posts.
Cyber
Fortinet Says FortiMail Is Being Exploited. CISA Gave Agencies Until October 4.
Unauthenticated attackers can write files on the management interface. Some branches still wait on a numbered patch.
Dark Web
Police Seize KillSec's Leak Site. Europol Says the Alleged Boss Is 16.
Operation KillSwitch hit servers in Hamburg, searched eight properties, and provisionally arrested three people.
Dark Web
Warlock Used Old SharePoint Holes Against Water, Telecom, and a University
Symantec says the crew blinded 40 hosts in about two hours, then dropped ransomware.
Tools
More Than 543,000 GitHub Secrets Were Still Live. Median Age: 784 Days.
Truffle Security checked 224 million repositories. Push Protection did not save the old keys.
Privacy
Pentagon HR Breach Hit More Than 3 Million Military Records, Including SSNs
A file-sharing hole sat open from October 2025 to July 2026. Credit monitoring runs through August 19, 2027.
Tools
Cloudflare Put Web Search Behind AI Gateway and Opened Mail-Gated Tunnels
Birthday Week also added a closed beta for a self-serve OHTTP gateway. No Cloudflare account required on either side of the new Quick Tunnels.
Privacy
Frontline Education Says a Third-Party Flaw Exposed School Employee SSNs
The company is notifying districts after attackers used a vendor-software hole to steal employee information.
AI
Microsoft Says Attackers Are Getting More From AI Than Defenders Are
The company's 2026 reporting describes exploit windows measured in hours against patch cycles still measured in weeks.