45 digests, newest first, page 1 of 3, browse the folder on GitHub
Oct 10, 2026, 3 items
Claude is the subject of a new report on model behavior. The organization will publish more frequent reports beyond system cards and regular risk reports.
Also covers ARTEX AI and Claude agents used in attacks on South Korean banks, AcePDF Converter and Editor lifetime license for $23.97.
Oct 8, 2026, 8 items
Step-5 preview has been tested for about two weeks with impressive results. The earlier Step-3.7 was a long‑time favorite on the Nous Portal for many Hermes users.
Also covers Hands‑on SOC Home Lab with AD, Splunk, pfSense, and Hardened Endpoints, InnoEdge Labs exploits Philips Hue Bridge Pro at Pwn2Own, Synacktiv Speedrun CTF at Booth Day 1 and 4 more.
Oct 7, 2026, 6 items
Alessandro Fanio Gonzalez disclosed a vulnerability in Chroma targeting AI Infrastructure. The exploit required 2 N-days and 1 collision.
Also covers Home Assistant Green downed in Pwn2Own event, blackmagick.io updates - new STUN Field Tasking and Pulse articles, Lexmark CX532adwe Exploited at Pwn2Own and 2 more.
Oct 1, 2026, 9 items
ICS advisories provide critical information about current security issues, vulnerabilities, and exploits surrounding Industrial Control Systems (ICS).
Also covers ISMG Summits - Identity, Resilience, and AD Environments, Malware Sharing - VXUG and Abuse.ch, Malware Analysis - Repackaged KMS Auto and XMRig and 5 more.
Sep 30, 2026, 10 items
Google SecOps investigations can now incorporate advanced querying and machine learning capabilities directly into their workflows.
Also covers Security - Codex Security Cloud Upgrade, Security - Independent Testing of AI Agent Security, Security - Kubernetes Operators and Privilege Management and 6 more.
Sep 28, 2026, 9 items
Practical OSINT skills are essential for builders to gather information and stay ahead in the field.
Also covers Google Gemini "Hacked" 3 Companies During Security Test, LESS WRONG Architecture Ever Safe?, LOW Podcast Reaches 100,000 Downloads and 5 more.
Sep 27, 2026, 9 items
Monitoring for sandbox environments is crucial for identifying potential security threats. Here's a quick rundown of some monitoring I've deployed for our sandbox.
Also covers Security - Unacceptable Security Incidents, Security - Misunderstanding Security Measures, Security - Citrix NetScaler ADC and Gateway Security Bulletin and 5 more.
Sep 26, 2026, 10 items
Waf-detector is a high-performance tool for detecting Web Application Firewalls (WAFs) and Content Delivery Networks (CDNs).
Also covers National Public Lands Day, AI Detection Timeline Improvement, Cryptocurrency Meme Token and 6 more.
Sep 25, 2026, 8 items
Azure and Entra ID the way attackers do. During our Azure course at #SpecterBash, learn to identify the misconfigs and attack paths that matter, including those...
Also covers Security - Azure Pentesting Suite, Security - Anthropic Claude Code Credits, Security - KEV Catalog and 4 more.
Sep 24, 2026, 10 items
Ransomware-as-a-Service (RaaS) has become a significant threat in the cybersecurity landscape.
Also covers Security - Medical Data Leaks, Security - PostgreSQL Vulnerability, Security - Vulnpocalypse and 6 more.
Sep 23, 2026, 4 items
PostgreSQL 17 introduces native memory tuning for parallel index builds, but F5, BIG-IP, a 20-year-old primitive, a security appliance, an "authentication" mechanism,...
Also covers Security - Malware Detection, Conferences - GrrCON, Security - Threat Intelligence.
Sep 22, 2026, 8 items
AI-enabled threats are becoming increasingly common, with attackers using AI to research targets, mimic trusted behavior, and accelerate lateral movement once they gain...
Also covers Security - syft v1.52.0, Security - CVE-2026-59309 & CVE-2026-59310, Security - ICS Advisories and 4 more.
Sep 22, 2026, 10 items
Lazy work used to mean too little output. Now, with AI, it often means too much and more work for everyone else.
Also covers Security - AI Assistant Vulnerabilities, Security - TypeSafe/Jev/System One Research, Security - Altar-1 Open-Weight Security Model and 6 more.
Sep 21, 2026, 10 items
OpenAI's community forum SSO turned a Discourse libheif heap overflow into employee ChatGPT and Codex — then a harmless PR in the internal monorepo.
Also covers Security - Investigative Journalism, AI - LLMs and Agents, Personal - The Art of Not Giving a Fuck and 6 more.
Sep 20, 2026, 10 items
Windows Hello for Business (WHfB) is a biometric authentication system that uses facial recognition, fingerprint scanning, or iris scanning to authenticate users.
Also covers Security - Living Off the Cloud: A Python Implant Hiding Its Entire C2 Inside Microsoft 365 & Azure, Security - TraderTraitor macOS Backdoor Campaign, Security - Polaris v10.2.3 and 6 more.
Sep 19, 2026, 10 items
AI-powered cybercrime gangs have been making headlines in recent months, with some groups leveraging artificial intelligence to carry out sophisticated attacks.
Also covers Cybersecurity - Netlogon Exploit, Cybersecurity - Asymmetric Cyberwarfare, Cybersecurity - AI and Cybersecurity and 6 more.
Sep 19, 2026, 10 items
AI coding plugins are becoming a new part of our software supply chain. And this week we got a pretty spectacular demonstration of why that matters.
Also covers Security - CISA Cybersecurity Assessment Programs, Security - HackerContent vs Traditional Marketing Agencies, Security - HEIF Heist Investigation and 6 more.
Sep 18, 2026, 11 items
BYOVD (Bring Your Own Vulnerable Driver) techniques are used by threat actors to disable EDR (Endpoint Detection and Response) systems.
Also covers Security - AI Governance and Systems Architecture, Security - Air-Gap Jumping with Thermal, Security - Cyber Mentorship and 7 more.
Sep 18, 2026, 8 items
Drone misidentification has become a significant problem in various countries, including Denmark.
Also covers Security - Drone Farce, Security - OSINT Fundamentals, Security - Resume Writing and 4 more.
Sep 17, 2026, 7 items
Risk management is a crucial aspect of decision-making, and understanding its basic principles is essential.
Also covers AI Safety - Misalignment Reporting Framework, Social Engineering in NLP, AI Doomers - Technical Incoherence and 3 more.