The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 541 to 564 of 654 briefings

Sunday 13 September

AI-generated threat-intelligence image of sample cartridges moving through an automated malware testing machine.

AI Security13 Sept 2026

Anthropic says a Russia-linked actor automated malware evasion. Static detections now impose less cost.

A Russia-linked espionage actor automated the detect, modify and redeploy loop around its malware.

AI-generated identity-security scene of one access badge opening several tenant mail compartments beside a mail conveyor.

Breaches and Incidents13 Sept 2026

Brevo’s SAML flaw crossed 138 customer accounts. Six sent phishing through legitimate infrastructure.

A Brevo SAML scoping failure let one organisation’s identity assertion cross into other customer accounts.

AI-generated security editorial scene of a protected document escaping from a locked repository archive drawer.

Threat Intel13 Sept 2026

GitLab fixes a CVSS 10 file-read flaw. Internet probes appeared one day later.

GitLab’s critical patch closes an unauthenticated arbitrary-file-read route in the repository commits API.

AI-generated policy editorial scene of a secure compute cabinet viewed from an independent evaluation desk.

Compliance and Regulation13 Sept 2026

Anthropic will embed external evaluators. The 6–12 month warning still has no binding speed limit.

Anthropic will give external evaluators employee-like access as its chief executive calls for slower frontier AI development.

$AI-generated threat-intelligence still life of three fractured security layers surrounded by four evidence cases.$

Threat Intel13 Sept 2026

BlueMoon chains 3 zero-days across Chrome and Windows. Four espionage groups adopted it in days.

Four espionage groups adopted BlueMoon, a shared chain joining two Chrome V8 vulnerabilities with a Windows kernel elevation flaw.

Saturday 12 September

An illuminated orchestration core coordinates specialist agent nodes, isolated compute sandboxes, files, browser tools and an MCP gateway.

Market and Supply Chain12 Sept 2026

OpenAI’s Agents API turns the Codex harness into a service. The environment boundary is the real decision

The Agents API manages the Codex harness, while developers still own the execution environment, tool permissions, evidence and total operating cost.

Wednesday 9 September

An open iPhone Duo held in two hands, showing its large folding inner display.

Market and Supply Chain9 Sept 2026

Apple launched five products. The UK price ladder runs from £119 to £3,199.

iPhone Duo starts at £1,999 and arrives five weeks later. Here is what A20 Pro changes, how every model compares and which upgrades earn their price.

AI Security9 Sept 2026

Google disclosed a 10.0 ADK flaw today. The fix shipped 27 days ago.

The affected path is adk web with pytest installed. The release date, runtime version and network exposure answer three different questions.

Threat Intel9 Sept 2026

Two Tanium report permissions can become code execution. Three release branches need checking.

Comply has two distinct access paths in these advisories. The fixed module versions matter more than a platform-level update checkbox.

Compliance and Regulation9 Sept 2026

Ofcom opens its intimate-image enforcement programme. The new measures start in 21 days.

Hash matching is one part of the protection system. Scope, reference quality, review and effective alternatives still need evidence.

AI-generated conceptual airport illustration: waiting aircraft beneath a network of teal and amber routes; not a photograph of the incident.

Breaches and Incidents9 Sept 2026

NATS fixed the flight-processing system. The airport disruption kept moving.

The system was restored on 8 September. The aviation network still had a backlog to clear. A sourced timeline and worked recovery example explain the gap.

Tuesday 8 September

An empty out-of-hours IT operations desk during a night maintenance window: two dark switched-off monitors, a keyboard pushed askew, a mug of tea with a spoon, a clipboard holding a printed checklist with lines ticked in biro, headphones and a notepad, lit by a single desk lamp, with a server rack of amber and green standby lights visible through a glass partition behind.

Threat Intel8 Sept 2026

Two perfect scores in this Patch Tuesday need no action. The two being exploited score 7.8.

Read from Microsoft's own CVRF. Nothing is publicly disclosed, the 1,170 figure is a month's accumulation, and the field to check is Customer Action Required.

Page 47

Tuesday 8 September

A product compliance officer's desk late at night: a thick ring-bound regulatory dossier lying open with tabbed dividers, a small unbranded white connected sensor with its casing lifted off to expose a green circuit board, a desk telephone with the handset off its cradle, and an empty wire mesh in-tray, lit by a single desk lamp with a plain wall clock indistinct in the shadows behind.

Compliance and Regulation8 Sept 2026

The CRA reporting duty starts on Friday. The address to file at was published in a FAQ, and does not answer.

Updated 16 September: the portal launched on time on 11 September. Our 8 September measurement found the host not completing a TLS handshake three days before the duty began. Three new obligations arrived in the same edit.

A small online retailer's despatch bench at night after closing: three sealed plain cardboard parcels stacked under a caged work lamp, a small thermal label printer with a curl of blank labels spilling onto the bench, a black card payment terminal with a dark screen, a roll of packing tape and scissors, with racking of plain stock cartons receding into shadow behind.

Threat Intel8 Sept 2026

Adobe told Commerce merchants to rotate their payment gateway keys. The coverage stopped at the patch.

Read from Adobe's own bulletin, the NVD record and CISA's catalogue. A fully patched store was still taken, and the catalogue has not moved since Friday.

A long polished committee table in a wood-panelled parliamentary room after the sitting has risen and the room has emptied: a thick bundle of loose printed amendment papers stacked and unturned in the centre, a few separate sheets pulled clear beside it, a water glass, a pen and two pairs of reading glasses, with an empty green leather chair pushed back at an angle.

Compliance and Regulation8 Sept 2026

The Computer Misuse Act defence came back yesterday, with a new word in front of it

Read from Hansard and the Bills API. A returning commitment with a new gate, a contradiction inside one debate, and a Government vendor package the Government did not move.

Monday 7 September

A small unbranded network router with external aerials on a steel bench at night, its lid removed to expose a green circuit board, yellow and blue patch leads looping from its ports, an amber status light lit, with a blurred terminal display behind it.

Threat Intel7 Sept 2026

A national CERT found six RouterOS flaws with a cyber model, and wrote down exactly what the model did not do

MikroTrick, the indicators of compromise, and the methodology section almost nobody quoted. The vendor's own detection marker does not prove a device is clean, and CERT Polska say so.

An unbranded rack-mounted network appliance pulled half out of a dark server rack on its slide rails, network cables hanging loose beneath it, lit by a hard torch beam from the right.

Threat Intel7 Sept 2026

SonicWall's exploited SMA 1000 flaws need four remediation steps, and almost everyone reported one

Vendor-confirmed exploitation, a KEV deadline that expired on Saturday, and a remediation procedure that assumes you may already be compromised.

A reporter's desk at night lit by a single lamp: a spiral notebook covered in illegible shorthand, a phone face up, and a laptop showing an empty search result, with a lit government building through a rain-streaked window.

Compliance and Regulation7 Sept 2026

The government can order a vendor's kit removed from critical infrastructure, and never announced the power

Checked against the Bills API. Directions can require removing or disabling installed equipment, reach outside the UK, and arrive with neither a delegated powers report nor an impact assessment.

A wood-panelled parliamentary committee room with green leather benches, a brass banker's lamp with a green shade, and a thick bundle of amendment papers open on a polished oak table beside reading glasses and a pen.

Compliance and Regulation7 Sept 2026

The Computer Misuse Act amendment before peers this afternoon creates no statutory defence, whatever its heading says

Read from the Bills API rather than the marshalled list. Three procedural duties, no defence, and a government commitment that has quietly lost its central phrase in nine months.

Sunday 6 September

A plain unbranded speaker's lectern standing alone on a low stage under a single overhead spotlight, with rows of empty chairs receding into darkness behind it. Nothing rests on the lectern and it carries no signage.

Compliance and Regulation6 Sept 2026

The Cyber Resilience Act's 24 hour clock starts on Friday, and the only lawful way to meet it has a documented failure mode

Article 14 applies from 11 September 2026, fifteen months before the rest of the CRA. Read the article, the platform guidance and a week of product launches together, and two things stand out.

Saturday 5 September

A grid of dark stained wooden library card catalogue drawers photographed at a raking angle, each with a tarnished brass label frame catching the light. Every label frame is empty.

Threat Intel5 Sept 2026

Friday 4 September

Three plain polished brass calibration weights of increasing size standing in a row on a matte charcoal surface, lit by a cold rim light from the right. None of them carries an engraved denomination or any other marking.

Market and Supply Chain4 Sept 2026

Two acquisitions were worth 5.4 times every venture round in cyber security for six months, and the funding figures do not reconcile

H1 2026 venture funding across the whole sector was $10.6bn against $57bn for two deals. Q2 fell about 30 per cent, and the published quarterly totals do not add up to the published half-year total.

Show 12 more

The Briefing

Sunday 13 September

Anthropic says a Russia-linked actor automated malware evasion. Static detections now impose less cost.

Brevo’s SAML flaw crossed 138 customer accounts. Six sent phishing through legitimate infrastructure.

GitLab fixes a CVSS 10 file-read flaw. Internet probes appeared one day later.

Anthropic will embed external evaluators. The 6–12 month warning still has no binding speed limit.

BlueMoon chains 3 zero-days across Chrome and Windows. Four espionage groups adopted it in days.

Saturday 12 September

OpenAI’s Agents API turns the Codex harness into a service. The environment boundary is the real decision

Wednesday 9 September

Apple launched five products. The UK price ladder runs from £119 to £3,199.

Google disclosed a 10.0 ADK flaw today. The fix shipped 27 days ago.

Two Tanium report permissions can become code execution. Three release branches need checking.

Ofcom opens its intimate-image enforcement programme. The new measures start in 21 days.

NATS fixed the flight-processing system. The airport disruption kept moving.

Tuesday 8 September

Two perfect scores in this Patch Tuesday need no action. The two being exploited score 7.8.

Tuesday 8 September

The CRA reporting duty starts on Friday. The address to file at was published in a FAQ, and does not answer.

Adobe told Commerce merchants to rotate their payment gateway keys. The coverage stopped at the patch.

The Computer Misuse Act defence came back yesterday, with a new word in front of it

Monday 7 September

A national CERT found six RouterOS flaws with a cyber model, and wrote down exactly what the model did not do

SonicWall's exploited SMA 1000 flaws need four remediation steps, and almost everyone reported one

The government can order a vendor's kit removed from critical infrastructure, and never announced the power

The Computer Misuse Act amendment before peers this afternoon creates no statutory defence, whatever its heading says

Sunday 6 September

The Cyber Resilience Act's 24 hour clock starts on Friday, and the only lawful way to meet it has a documented failure mode

Saturday 5 September

Cisco found these with frontier AI models, grouped them into seven umbrella CVEs, and never said how many bugs there are

The KEV remediation window fell from 21 days to three, and the 60-day tier everyone quotes has never existed

AMD's Threadripper Halo Station can run a trillion-parameter model, on the configuration that was not in the case

Friday 4 September

Two acquisitions were worth 5.4 times every venture round in cyber security for six months, and the funding figures do not reconcile