The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 505 to 516 of 658 briefings

Friday 18 September

AI Security18 Sept 2026

Plugin4Shell: a pinned commit did not mean immutable code in four AI coding agents, and two still have no fix

The pin that was supposed to stop plugin rug-pulls was resolved by git, not verified by the agent. Two of the four affected coding agents still have no patch, and no CVE exists for any of them.

Threat Intel18 Sept 2026

WeaselBiscuit ran on import, not install, so ignore-scripts would not have stopped any of the 17 npm packages

WeaselBiscuit executed on import rather than install, so the standard ignore-scripts control sat at the wrong gate. Every package is now gone from npm, median takedown under 13 hours. Here is what it could actually reach.

Breaches and Incidents18 Sept 2026

Brevo's attacker hostname sat in a public certificate log for 19 days before the ClickFix injection

A stolen Cloudflare key let an attacker rewrite Brevo's embedded scripts at the CDN edge, so origin files and their timestamps never changed. The earliest public evidence was a certificate logged 19 days before the injection.

AI Security18 Sept 2026

Azure AI Foundry scored a CVSS 10.0, and customers got nothing to patch and nothing to check

CVE-2026-85889 carries CVSS 10.0 and CWE-306, missing authentication for a critical function. Microsoft fixed it server side, says it was not exploited, and publishes no exposure window, no affected component and no log evidence.

Threat Intel18 Sept 2026

Unauthenticated root on a Check Point management server, triggered by an over-long username at login

CVE-2026-91843 lets an unauthenticated attacker run code as root on Check Point Security Management, Multi-Domain and Log Servers. The advisory names eleven affected version bands and offers four packages. No exploitation is reported and one indicator is published.

Thursday 17 September

Market and Supply Chain17 Sept 2026

MediaTek's Dimensity 9600 Pro takes flagship phones to 2nm with an all-big-core CPU and two NPUs for AI agents

The Dimensity 9600 Pro brings a 2+3+3 Arm C2 CPU, an NPU 1090 plus an always-on NPU, LPDDR6 and UFS 5.0, and HWRoT, PQC and AISeal security. Here is how it works and where it sits against the 9600M and 9500s.

AI Security17 Sept 2026

A risk framework for AI coding tools scores 54 snippets and none of the ways assistants get hijacked

arXiv 2609.18658 scores AI-generated Python with Bandit severity weights. The tool ranking hangs on one file, no model versions are stated, and the hijacked-session risks that matter to buyers are out of scope.

AI Security17 Sept 2026

Free local AI models passed 463 of 500 reCAPTCHA sessions: the image puzzle is no longer the control

Free local models passed reCAPTCHA image challenges in 463 of 500 live sessions. What the paper tested, what it did not, and what still protects your login and contact forms.

AI Security17 Sept 2026

Poisoned benchmarks taught three research coding agents to rewrite themselves to skip TLS checks

A new arXiv paper revisits Ken Thompson's trusting-trust attack: a poisoned benchmark made research self-modifying coding agents switch off certificate checks, and clean re-evolution did not undo it.

AI Security17 Sept 2026

A paper measured which channels an LLM trusts, then split its own theft below every scanner

Ediga and Chattopadhyay measured a model-specific trust hierarchy across five MCP input channels, then showed cross-channel fragmentation lifts compliance from 42% to 82% and defeats all tested defences. A benchmark rate, not a field rate.

AI Security17 Sept 2026

Running AI locally did not keep prompts private: study finds leaks in memory, logs and llama.cpp slots

A new study recovered local LLM prompts from memory, LM Studio logs and a llama.cpp cross-tenant slot flaw that worked 200 times out of 200. Here is what it proves, what it does not, and what to check.

Compliance and Regulation17 Sept 2026

A court took 15 Radaris domains under Daniel's Law. Radaris.net was still serving profiles 21 days later

Domain control is a real enforcement lever against offshore people-search sites, but the Radaris record shows the address can move faster than the court. What the orders say, what stayed online, and what UK teams can actually do.