The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 481 to 492 of 658 briefings

Sunday 20 September

Threat Intel20 Sept 2026

RatHat pairs with its own Android Debug Bridge. Uninstalling the APK can leave the shell behind

A step-by-step analysis of RatHat's Accessibility abuse, local ADB self-pairing, native persistence, credential theft and defensive controls.

Threat Intel20 Sept 2026

Three SBOM tools scanned the same projects and disagreed. CRA compliance cannot be a generator checkbox

The new SBOM study quantifies tool disagreement and shows what manufacturers should validate before the Cyber Resilience Act applies in full.

AI Security20 Sept 2026

Anthropic has opened a wet lab for AI-directed biology. The approval boundary is not public

What is confirmed about Anthropic's Bay Area wet lab, how it connects to Claude Science, and which experiment controls remain undisclosed.

AI Security20 Sept 2026

Astra for Law passed 54% of a US legal research test. The remaining 46% is the governance problem

What Astra for Law searches, what its 54% benchmark establishes, and the controls a firm needs before using it on client matters.

Threat Intel20 Sept 2026

ShinyHunters defaced Clop’s leak site. The page proves write access, not stolen onion keys

The Clop defacement is confirmed at the presentation layer. The evidence does not yet establish server root, victim-data access or control of the onion identity.

AI Security20 Sept 2026

Claude leads 26% of measured Anthropic R&D. The autonomous category is still zero

Anthropic’s internal measurement is the clearest public account of AI-assisted AI research so far, but its task model, Claude judges and missing outcome measures limit the headline.

Breaches and Incidents20 Sept 2026

Gyazo exposed about 492.4 million image records. Its notice cannot rule out private-image viewing

Gyazo confirmed exceptional metadata exposure and a list of private image files. The disclosed fields can reconstruct the context around screenshots and drive secondary compromise.

AI Security20 Sept 2026

Anthropic will pay Accenture to evaluate Anthropic from inside. No standard says what independence means

Anthropic’s embedded evaluator model promises deeper evidence. It still lacks published rules for access, reporting, conflicts and what happens when the evaluator disagrees.

Compliance and Regulation20 Sept 2026

Four AI labs were sued over a pledge to slow AI. The docket proves a case exists, not a cartel

Buist v. Anthropic is a real federal antitrust case. Its central facts remain allegations, and the difference between public agreement and commercial coordination will decide it.

Compliance and Regulation20 Sept 2026

Trump announced an AI Force. The federal government already has three AI coordination structures

The AI Force announcement sits on top of an existing federal AI structure. Until authority, mission and resources are published, duplication is the central risk.

Saturday 19 September

Compliance and Regulation19 Sept 2026

Unredacted OpenAI filings: an internal email is evidence of what one person wrote, not a ruling

The quoted phrases are real. They come from a plaintiffs' brief citing a fact statement whose exhibits are sealed, in a case where no court has ruled on fair use. What the filings establish, what they do not, and what UK buyers should check.

Compliance and Regulation19 Sept 2026

California's AI kill switch is a 26 word request for advice, and it binds nobody

Governor Newsom's order does not require anyone to build a kill switch. It asks for a memo in 59 days, and quietly pulls two auditor deadlines forward by 245 and 397 days.