The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 637 to 654 of 654 briefings

Friday 14 August

Threat Intel14 Aug 2026

Jewelbug ran espionage and crypto fraud from one panel, with 580,000 stolen cookies logged. Symantec's own attribution doubts it was one team

One million implant check-ins, more than 15 government webmail tenants watering-holed by a single script tag, and a supplier relationship the coverage flattened into one team.

Thursday 13 August

Threat Intel13 Aug 2026

Unit 42 extracted every synced passkey from a Windows machine. Ars Technica called it a nothingburger

Pass-ta-key, Silver and Golden: account takeover with no user interaction, forged biometric verification, and every synced key exported for resale. Why two outlets reached opposite conclusions from the same paper.

Threat Intel13 Aug 2026

The August zero-day was North Korea. The part still working is the job advert

Check Point attributes the August zero-day to Lazarus. The exploit is fixed, but the delivery chain, a recruiter approach and an SEO-ranked impersonation site, is untouched and still works.

Wednesday 12 August

AI Security12 Aug 2026

xAI launches Grok Bot at $200 a month. It signs in as you, so your audit log will say you did it

xAI's agents sign into your tools with your own login and hand work to each other with no human step. Every action lands under your account, and the containment controls are not on the tiers you can buy.

Threat Intel12 Aug 2026

Microsoft patches 420 flaws and 3 zero-days. Not one zero-day is rated Critical

Counted from Microsoft's release document: 420 CVEs, 176 elevation of privilege, 119 in Office. Why the published totals disagree, and why severity-first triage gets this month wrong.

Tuesday 11 August

AI Security11 Aug 2026

OpenAI's cyber model completes 95% of exploit requests. Removing the safeguards got 2%

Daybreak Blue, Daybreak Red and GPT-5.6-Cyber. The published completion rates say more about AI assurance than the announcement does.

AI Security11 Aug 2026

An AI agent found 84 flaws in 5G core software. Twenty-three still have no fix

84 flaws, 81 CVEs, 23 with no patch. The number nobody leads with is the one that matters, and private 5G networks are where it lands.

Thursday 6 August

Compliance and Regulation6 Aug 2026

The CRA reporting duty starts in five weeks. The platform does not

Everyone is planning for December 2027. The duty that actually lands first arrives on 11 September 2026, applies retroactively to products already sold, and is the fourth incident clock now running in parallel.

Monday 3 August

AI Security3 Aug 2026

I checked five LLM cost calculators against the published rates

Two of five price Claude Opus at 3x the real rate. All five miss the tokenizer change that makes their token counts about 30% low on current Claude models.

AI Security3 Aug 2026

Your token counter may be reading your prompt

One popular token counter posts your text to its server on every keystroke. Another promises no tracking while loading an analytics script. Here is how to check for yourself.

AI Security3 Aug 2026

Four reasons your Claude bill does not match the calculator

A price rise in four weeks, cache writes charged above input rate, stacking multipliers, and a tokenizer change that quietly invalidates every character-based estimate.

Tuesday 21 July

Breaches and Incidents21 Jul 2026

Ransomware playbooks keep failing at the same step: recovery

Ransom demands are collapsing and backups are working. Average recovery cost still rose 11% to $1.7m, and JLR lost five weeks of production for a modelled £1.9bn. The money moved from the ransom to the restore.

Page 55

Tuesday 21 July

AI Security21 Jul 2026

Agentic browsers widen the prompt injection attack surface

Brave broke Perplexity Comet twice after it was declared fixed, then repeated the attack against three more agents. The vendors are not losing a patching race; the architecture composes trusted instructions with untrusted content in one context window.

Breaches and Incidents21 Jul 2026

Half of breaches now involve a third party. Every clock starts too late

A 72-hour clause is not a control, it is an accounting mechanism. The clock starts at the vendor's awareness, which is the one variable your contract cannot set.

Threat Intel21 Jul 2026

Credentials did not stop mattering. The DBIR headline was read wrong

Initial access changed. The attack path did not. Half of ransomware victims with a credential leak saw it within 95 days of the attack, a window long enough to act in, if anyone is looking.

Compliance and Regulation21 Jul 2026

The AI Act deadline landed on Sunday. Most people watched the wrong half

High-risk slipped sixteen months. Article 50 transparency did not move an inch and applied from Sunday. The obligation that actually landed is the one that got no attention.

AI Security21 Jul 2026

Model context protocols are quietly extending the enterprise perimeter

A poisoned tool description is a prompt injection that ships once and fires on every invocation, for every user, in every session. It is the same root cause as the browser attacks, with persistence added.

AI Security21 Jul 2026

58% of executives have had an AI incident. Nearly all are confident

Executive confidence in AI use is not correlated with anything measured. The organisations that had an incident and the ones that feel fine are largely the same organisations, because neither has an inventory.