The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 205 to 216 of 658 briefings

Friday 9 October

A dark room with a dark walnut pigeonhole sorting frame at the right, three rows of four slots with blank colour tabs in indigo, cyan, amber and slate grey, holding cream envelopes at different depths. A steel pocket stopwatch with a plain dial lies open on the bench in front of it, beside two loose blank envelopes. No writing appears anywhere, and the left of the picture is empty dark.

AI Security9 Oct 2026

Microsoft calls Decision-1 '4.5 times faster'; JevBench's raw timing for the runner-up gives 1.4 times

Microsoft's launch chart sets an 85 ms measured API against JevBench's adjusted 380 ms for Quyet-1.0-Large, whose raw timing is 116 ms. The 36-benchmark accuracy ranking contains no general-purpose LLM, and no independent result for Decision-1 exists yet.

A dark room with a slim black monitor on a walnut desk at the right of the picture. Its screen shows one window outlined in pale cyan, made only of empty pills and blank rounded squares, with a small cyan pill at the top right. Beside it stands a compact black tower computer with a mesh front and one amber status light. The left is empty dark, with the headline and a stat drawn over it: 107 days.

Threat Intel9 Oct 2026

AnyDesk Linux: the researchers' root exploit came 107 days after a release logged only as a crash fix

What AnyDesk's changelogs, its post on X, the researchers' post, NVD, CVE.org and CISA's catalogue establish about the AnyDesk Linux flaw: dates, scope, the relay dispute, the UK timescales and a ranked checklist.

A dark pinboard covered in rows of pinned paper index cards, nearly all turned face-down and blank, with a few turned face-up to show blank white faces with empty grey bars. Text on the left reads: 2,627 ransomware claims, 247 confirmed by victims. 9.4% of Q3's claims are confirmed by the victim (247 of 2,627, derived).

Threat Intel9 Oct 2026

Q3's record 2,627 ransomware attacks: 247 confirmed by the victim, 2,380 only claimed

Recounting Comparitech's Q3 2026 ransomware record from its own tables: 247 of 2,627 confirmed, a Q2 that was a dip, 517 of the 597 extra claims from strains with no Q2 claims, and two other trackers that agree on direction and not size.

A dark server room: a black rack holds one graphite backup storage server with a grid of identical drive bays and an amber light, and a graphite monitor on a steel desk shows a console of blank rounded rows. Text on the left reads: Ahsay said 10.3.4 fixed it. A day later: not fully. 3 days 16 hours: NVD record to Huntress's first sighting (derived).

Threat Intel9 Oct 2026

Huntress said AhsayCBS 10.3.4 was affected; Ahsay said it fixed both flaws, then said it did not fully

A computed gap, one build that two vendors described in opposite ways until the vendor changed its answer, and a backup console that MSPs expose to clients. What the record, Huntress and Ahsay state, what is not stated, UK clocks for MSPs and the order of actions.

An old beige computer tower, switched off, stands beside a graphite laptop with a blank pale-blue screen, under a wall calendar with an empty grid and two cells ringed in red. Text on the left reads: Windows Update certificates expire 17 May, 19 June 2027. 125 days: Server 2016 support ends this long before 17 May.

Market and Supply Chain9 Oct 2026

Windows Update certificates expire 17 May and 19 June 2027; Server 2016 support ends 125 days before

Microsoft's 8 October notice sets two Windows Update certificate dates. What its six-row table states and leaves out, which listed versions leave support first, the WSUS exception, the UK clocks and the order to work in.

A regulator's desk at dusk with a row of identical pale grey-blue folders, some with a blank sheet sliding out, a printed checklist with empty boxes, a pen and an open laptop showing a blank response form. No people. Overlaid text reads ICO details changes at 8 of 10 AI developers, and dates none of them, plus 8 of 10, developers with a line of their own: 3 done, 3 promised, 2 both.

Compliance and Regulation9 Oct 2026

ICO details changes at 8 of 10 AI developers: 3 done, 3 promised, 2 both, and none dated

What the ICO's 8 October report prints for each of ten AI developers, what it leaves out, what the call for evidence on agentic AI asks, and the register a UK organisation using these tools should keep before 20 November.

A dark desk at night. A black wire in-tray is buried under a slumping heap of identical blank report sheets, each with an empty title bar and rows of grey bars where text would be, and some sheets have slid across the desk. A small closed steel box with one narrow empty slot stands beside it, and behind them a laptop shows a plain list of blank rows with one cyan row. Nothing is written anywhere and nobody is in the room.

AI Security9 Oct 2026

OSS Scanner skips human review: Anthropic expects over 90% true, but prints no rate for the 4,824 already sent

Anthropic expects over 90 per cent of OSS Scanner's unreviewed reports to be true, but gives no rate for the 4,824 already sent direct. Its early sample reads 88 or 99 per cent by definition. Also the infrastructure program's eleven partners, and UK clocks.

A dark equipment room: a black rack holds three identical graphite network appliances, each with one amber light, and below them a graphite laptop on a steel cart shows a blank sign-in screen of rounded empty fields. Text on the left reads: The previous NetScaler fix build is affected, for SAML IdPs. 3 in 11 days: NetScaler bulletins on 27 Sep, 3 Oct and 8 Oct.

Threat Intel9 Oct 2026

The Briefing

Friday 9 October

Microsoft calls Decision-1 '4.5 times faster'; JevBench's raw timing for the runner-up gives 1.4 times

AnyDesk Linux: the researchers' root exploit came 107 days after a release logged only as a crash fix

Q3's record 2,627 ransomware attacks: 247 confirmed by the victim, 2,380 only claimed

Huntress said AhsayCBS 10.3.4 was affected; Ahsay said it fixed both flaws, then said it did not fully

Windows Update certificates expire 17 May and 19 June 2027; Server 2016 support ends 125 days before

ICO details changes at 8 of 10 AI developers: 3 done, 3 promised, 2 both, and none dated

OSS Scanner skips human review: Anthropic expects over 90% true, but prints no rate for the 4,824 already sent

Citrix's third NetScaler bulletin in 11 days lists the previous fix build as affected, for SAML identity providers

Pwn2Own Ireland: AI infrastructure gave 23 of the 98 zero-days but 15% of the $1,262,000

Anthropic's new Usage Policy is 79% longer and takes effect 35 days after it was posted

Two of OpenAI's 30 exposed influence operations rate Category 5 and 4; its text names no outlet that ran them

PCI SSC's AI guidance has one 'must' and 130 'should', and asks for explicit human approval in one example