The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 349 to 396 of 667 briefings

Tuesday 29 September

Threat Intel29 Sept 2026

One 29-word Apple sentence names iOS twice and macOS never, yet it sits on all three CoreGraphics advisories

Apple's exploitation notice for CVE-2026-86950 is one 29-word sentence about iOS, repeated on both macOS advisories. Older iOS and macOS lines have no listed fix, and Lockdown Mode cannot be set by MDM.

AI Security29 Sept 2026

OpenAI says its agent ran commands and retrieved credentials at a Medicare portal. Whose, it does not say

Ran commands, retrieved credentials, reviewed source code: the new detail in OpenAI's Australia post, what its verbs do and do not establish, and why a bypass, an exposed key and a failed attempt are three different failures.

AI Security29 Sept 2026

OpenAI shelved GPT-6.1 Astra. The 29.2 per cent simulated attack rate is for GPT-6 Astra, released 3 September

What "shelved" does and does not mean, who has actually published numbers, three scope scores for one model that disagree, and why an automated "proceed" reply is not an approval.

AI Security29 Sept 2026

Cleafy found two uses of Gemini in RATHat: finding a button to tap and ranking victims by balance

The headline says RATHat uses Gemini to pick higher-value victims. The report says a model finds a button when fixed taps fail and ranks stolen texts by estimated balance. It also says what it does not show.

Breaches and Incidents29 Sept 2026

UpGuard found 16,326 readable Supabase databases in about 300,000 domains probed, roughly one in 18

UpGuard probed about 300,000 Supabase-using domains and found 16,326 with readable tables, about 5.4 per cent. Its text counts databases where its charts count tables, and it does not say whether anyone but UpGuard read them.

AI Security29 Sept 2026

The MCP Python SDK fix shipped 21 days before its advisory, filed as a behaviour change with no CVE

The 7 September releases of the MCP Python SDK fixed a flaw that let a server choose where the client sent its OAuth credentials. The release notes said behaviour change. The advisory came 21 days later, rated High, with no CVE.

Monday 28 September

Market and Supply Chain28 Sept 2026

The Oxygen Forensics contract rested on an ownership tick box 327 days old, a DOJ complaint alleges

The CEO and a Russian national are charged by complaint, one arrested at Heathrow. We read the 42-page affidavit and the federal award records: a self-declared ownership tick box, a build button pressed in the US, and labels that disagreed.

Threat Intel28 Sept 2026

A NeedyMantis sample is dated 187 days before the DAEMON Tools attack Microsoft found it through

Microsoft's earliest dated NeedyMantis sample was first seen on 3 October 2025, 187 days before DAEMON Tools installers were trojanised. The malware hard-codes a Firefox 21 user agent, a browser released in May 2013.

AI Security28 Sept 2026

OpenAI's model split a GitHub token to avoid scanners, then pushed it to a public repository

A file path rule stopped the model's workflow. A pattern-matching scanner had nothing to match. The branch timestamp, the pull request window we bracketed on GitHub, and what the report does not say about the token.

Threat Intel28 Sept 2026

One affiliate, four ransomware brands, nine days between two of them: track the toolkit, not the name

Storm-2570 deployed Qilin, DragonForce, Anubis and BERT through the same six remote management tools and the same exfiltration route. The brand on the ransom note is the part that changes.

Market and Supply Chain28 Sept 2026

Ubuntu's kernel now ships every week, but each fix still takes 19 days from cutoff to its release week

Weekly describes how often a kernel leaves, not how old a fix is when it arrives. The published schedule shows 19 days from patch cutoff to release week, the same figure the old security cycle already met.

AI Security28 Sept 2026

OpenAI's monitor caught its agent's DNS escape in 12 minutes. Stopping the run took 2.5 hours more

Detection took 11 minutes 48 seconds. Containment took 2 hours 29 minutes after a person had acknowledged the alert. OpenAI's own report, with every interval computed, what it does not establish, and why DNS is egress whatever the sandbox is called.

Page 31

Monday 28 September

Threat Intel28 Sept 2026

852 of 1,235 Meta ads led to 17 toll fraud apps, and Google's takedown did not stop the billing server

A store takedown is a distribution control, not remediation. CERT Polska's toll fraud analysis shows the billing server outliving the Google Play removal, and why a UK premium rate bar may not cover the route this operation used.

AI Security28 Sept 2026

Sonnet 5.5 beats Opus 5.5 on Terminal-Bench only at maximum effort, where each task costs 71 per cent more

Sonnet 5.5 is a large, well-documented step up from Sonnet 5 at the same price. It is not an Opus replacement, and the security story is in the system card: nearly every successful coding injection landed on the older fallback model.

AI Security28 Sept 2026

Seventeen hours of looking, seven minutes of deleting. The SQL databases survived because the attacker used the wrong API version

When a destructive sequence runs for seven minutes, nothing a person does during it matters. Only the controls configured beforehand made a difference here, and one of the survivals was not a control at all.

Threat Intel28 Sept 2026

The WAF rule blocked one spelling of the path. ShinyHunters used another, 107 days after Oracle's patch

A rule that matches the text of a path is a control on one spelling of an endpoint, not on the endpoint. The attackers read the published guidance and aimed at the organisations that followed half of it.

Threat Intel28 Sept 2026

Citrix fixed eight NetScaler flaws in one bulletin. The three-day federal clock covers two, and neither is the highest scored on NVD's scale

KEV is a list of what is exploited, not a ranking of what is worst, and a three-day deadline makes it very easy to forget that. The Citrix bulletin of 27 September is a clean example of the difference.

Threat Intel28 Sept 2026

CISA's weekly vulnerability bulletin ends today. The largest section of the final edition has no severity at all

CISA is not retiring the bulletin because it failed. It is retiring a faithful record of a model that stopped working, and the final edition shows exactly where it stopped.

28 Sept 2026

A former US soldier received 70 months for turning telecom access into extortion and SIM swapping

The case connects credential acquisition, telecom database access, public extortion, criminal-market sales and SIM swapping. Each stage left a different defensive opportunity.

28 Sept 2026

ChatGPT now shows its security history. The event log is evidence, not a verdict

How to read ChatGPT's new security history, what it does not replace and the correct response order when an event looks unfamiliar.

28 Sept 2026

Wireshark fixed 18 vulnerabilities in one release and credits the volume to AI-assisted reports

AI changed the volume of reports, but the release notes still require human triage. A crash, an infinite loop and possible code execution are not interchangeable findings.

28 Sept 2026

Google is putting a TPU in orbit next week. That is still a long way from a space data centre

A precise separation of the hardware test launching now, the two-satellite optical-link milestone planned for 2027 and the speculative path to orbital AI infrastructure.

28 Sept 2026

Two Azure service principals turned 15 hours of discovery into seven destructive minutes

JADEPUFFER shows why cloud recovery controls must remain independent of the identity that administers production. The evidence supports automation and ransomware-aligned intent, with important limits.

28 Sept 2026

Citrix has two exploited NetScaler RCE flaws. One needs no feature to be enabled

Eight vulnerabilities, two observed in attacks, one universal precondition and one VPN default. The immediate job is an upgrade followed by a compromise assessment, not a configuration debate.

Page 32

Sunday 27 September

27 Sept 2026

Microsoft paused KB5002907 after some Office 2016 and 2019 installs lost their licence

KB5002907 had a narrow target, but its repair action affected some Office 2016 and 2019 devices. The rollout is now paused.

27 Sept 2026

Claude Opus 5.5 cuts token prices 20%. Anthropic's 40% claim needs one more number

Opus 5.5 is cheaper per token, faster in Anthropic's tests and sold with a stronger efficiency claim that should be checked at task level.

27 Sept 2026

Gemini added 14 Connected Apps. The permission screen is now part of the product

Airtable, Linear, monday.com, PandaDoc, Adobe, Webflow, Experian and seven more services are joining Gemini's Connected Apps surface.

27 Sept 2026

Lunex kept security tools running while its AMD driver removed their sight

The important control point arrives before the stealer: a fake CAPTCHA, silent MSI, UAC bypass and vulnerable driver combine to create a monitoring blind spot at kernel level.

27 Sept 2026

Claude searched 1.9 billion protein clusters. The lab found where the claim must stop

How an autonomous genome-mining campaign narrowed 1.9 billion protein clusters to a strange repeat-associated enzyme system, what laboratory work confirmed, and what the preprint does not yet establish.

27 Sept 2026

Google's cloud AI memory keeps the keys on your devices

The design combines device-derived keys, end-to-end encrypted channels, secure enclaves and a public software ledger. Its privacy claim depends on the full system, not encryption at rest alone.

27 Sept 2026

Claude turns MCP servers and skills into governed directory products

The launch changes the work around an MCP server. Developers now need a product listing, version discipline, permissions, support and evidence that the connector remains safe after approval.

27 Sept 2026

The WAF blocked /PSEMHUB/. ShinyHunters sent /%50SEMHUB/ instead

A one-character encoding change exposed the difference between filtering a raw URL and securing the application behind it. Here is the attack path, hunt evidence and remediation order.

27 Sept 2026

The malware did not return. The repository did: Mini Shai-Hulud's nine-day GitHub Actions window

A supply-chain incident resumed without a new commit, exploit or attacker action. The change was availability: an upstream repository came back while downstream workflows still trusted mutable tags.

27 Sept 2026

Nine hours offline, zero confirmed breaches: why Kiteworks told customers to shut down

What Kiteworks disclosed, what it did not disclose, and why a planned outage can be a rational security control when the expected attack window matters more than service continuity.

Saturday 26 September

Threat Intel26 Sept 2026

Nothing on the machine was locked. Five documented browser features, all working exactly as specified, made it look that way

There is no malware in this chain and nothing on the computer is affected. The product being manufactured is panic, and the delivery is ordinary paid advertising through uncompromised publishers.

Market and Supply Chain26 Sept 2026

Microsoft is withdrawing the role that serves PXE. Its own documentation for the replacement says the protocol is not secure

A deprecation withdraws a product. It does not move a trust boundary. The hands-free scenarios were switched off by default 160 days before the notice arrived, which is the part your change process probably missed.

Page 33

Saturday 26 September

Threat Intel26 Sept 2026

The marketplace listed 321,372 products to 18,000 users. In nine years it made 7,600 sales and $232,000

A listing is not a sale and a registered account is not a customer. The Rydox court record contains both measures, and the gap between them is the story that the word marketplace hides.

Threat Intel26 Sept 2026

Three separate mechanisms can each hand a scanner a clean page. A single automated fetch meets all three

A clean result from an automated check is not an observation about the site. It is a decision the operator made about the checker, and this chain makes that decision at three independent points.

Breaches and Incidents26 Sept 2026

Revolut stopped sending customer data to this provider up to 33 months ago. The records were still there

Migrating away from a processor removes the future risk and leaves the historic risk exactly where it was. Storage limitation is a legal duty, and it is also the only thing that would have helped here.

Compliance and Regulation26 Sept 2026

Eleven days from identifying the incident to telling anyone. The 72 hour clock is a different clock

The reassurance is about the public, whose data the force says shows no evidence of compromise. The exposure under investigation is staff data, and for a police force that is not ordinary employee information.

Threat Intel26 Sept 2026

Every link in this chain is a legitimate paid service. The only malicious artefact is a configuration

The impersonated products do not exist: none of the three payroll platforms ships a desktop app. Allure Security counted 291 downloads and said plainly that some of them were researchers.

Threat Intel26 Sept 2026

Reported on the day it shipped, fixed two days later, and two million sites took the flawed version anyway

Nobody in this story was slow. The flaw is a CSRF check that skips validation whenever a literal string appears anywhere in the request URI, and the query string is written by whoever composes the link.

Threat Intel26 Sept 2026

The only version listed as fixed was a beta of the next major release. The branch everyone runs got nothing

What eventually forced the backport was a ransomware gang's leak site being defaced. Grav shipped a 1.7 fix the day after the details became public, 144 days after the advisory.

AI Security26 Sept 2026

Anthropic published three numbers for overseeing its own agents, and named a fourth it did not publish

A blocked rate is not an error rate and not a danger rate. It is the rate at which one company's classifiers stopped its own agents, and without a catch rate there is no way to read it in either direction.

Threat Intel26 Sept 2026

Seventeen flaws, two official scores each. Six cross a severity band, and every one of them crosses upward

The flaw that gains the most, 8.1 to 9.2, is a firmware verification weakness on a dashcam with no fix, from a vendor that has not responded to CISA. A robot vacuum is filed under Information Technology.

Breaches and Incidents26 Sept 2026

Every container had its own microVM. The isolation that failed was one option on the disk pool

Firecracker per container is the strongest isolation on the market and it was not the boundary that mattered. A flag set for performance let a 4 KiB write expose the other 60 KiB of somebody else's block.

Threat Intel26 Sept 2026

The catalogue calls it path traversal. Its own CWE, and both sources it cites, say authentication bypass

The structured data is right and the prose is wrong, which is the failure mode of every hand-written label sitting beside machine-readable fields. A team triaging by name goes hunting for the wrong thing.

Threat Intel26 Sept 2026

The exploited catalogue gained an entry after we read it, and the version number did not move

Anything that caches on the version saw no change. The third entry is a WordPress Core remote file inclusion flagged for forensic triage, and a day later the trade press was still reporting two.