The Daily Index — Friday, October 2, 2026 · TLDR Index

Across today’s newsletters

Today’s Index

An abstract restricted entrance illustrates how an encoded request interpreted differently by two authentication layers slips into an administrative area, representing the Cisco SD-WAN vManage authentication bypass. — AI-generated editorial illustration

TLDR InfoSec

REVENGE OF THE SD-WAN: EXPLORING AND EXPLOITING YET ANOTHER CRITICAL CISCO SD-WAN VULNERABILITY (CVE-2026-76504)

A single unauthenticated POST to /%6a_security_check mints an admin session on Cisco SD-WAN vManage through CVE-2026-76504, a critical authentication bypass Cisco disclosed on September 30 as an exploited zero-day. Cisco's login module checked the raw request URI while WildFly matched the decoded path, so the encoded request skipped the password check and fell into a session-continuation branch that trusted hardcoded internal usernames like viptela-reserved-cloudops. With ~1,500 vManage instances internet-exposed per VulnCheck, defenders should follow Cisco's advisory and hunt serviceproxy-access.log and vmanage-server.log for encoded j_security_check paths and viptela-reserved- usernames.

vulncheck.com · 6 min

TLDR InfoSec

FORTINET WARNS OF CRITICAL FORTIMAIL FLAW EXPLOITED IN ZERO-DAY ATTACKS

Attackers are exploiting CVE-2026-104286 as a zero-day, a CVSS 9.8 path traversal and NULL byte flaw in the FortiMail management interface that lets unauthenticated HTTP requests write arbitrary files and execute code. FortiMail 7.2.0 through 8.0.1 is affected, and fixed builds 7.4.9, 7.6.7, and 8.0.2 are not yet available, so admins should disable IBE or restrict the management interface to trusted networks. Compromise indicators include an added /data/etc/ld.so.preload and /data/lib/liblog.so, plus an archive account named archive234 pointing to 79[.]141[.]169[.]187, and CISA gave federal agencies until October 4 to triage and mitigate.

links.tldrnewsletter.com · 3 min

TLDR IT

MEMORY SQUEEZE SET TO TIGHTEN THROUGH 2028, MICRON SAYS

The memory shortage driving up server, storage, and PC costs is expected to get worse through 2027 and 2028, with Micron saying more than 75% of its 2027 output is already committed. For IT teams planning endpoint and infrastructure refreshes, analysts recommend locking in pricing where possible and being more deliberate about which hardware lifecycles can safely be extended.

computerworld.com · 5 min

TLDR IT

META WANTS PEOPLE TO USE ‘AI AGENTS' TO DO DAILY TASKS. WHY THAT'S A PROBLEM

Meta has launched its new AI agent, Muse, designed to handle daily tasks like shopping, booking appointments, and travel planning. While Zuckerberg promotes the system as approachable for all users, such agents could create deeper behavioral habits than social media and raise significant data privacy concerns given Meta's past infractions.

theconversation.com · 4 min

TLDR

WORLD'S FIRST ENHANCED GEOTHERMAL POWER PLANT COMPLETED IN JUST 23 MONTHS

Fervo Energy has started selling electricity from its Cape Station geothermal power plant. It is the first enhanced geothermal company to reach a key commercial milestone. The entire site has the potential to generate as much as 4 gigawatts of electricity. The first block at the site took 23 months to complete - Fervo aims to complete future blocks in as little as 18 months.

techcrunch.com · 2 min

TLDR InfoSec

SOLVING THE IDENTITY CRISIS FOR AI AGENTS

Uber faced two issues with agentic identity: its current identity model wasn't designed to account for agents acting on behalf of users, and provenance wasn't properly carried across different agents in a workflow. To address this, Uber implemented an identity system in which workflows begin by requesting a workload ID from SPIRE. That ID is then presented to a custom STS, which verifies in its agent registry that the requested agent is allowed to run on that workflow and returns a JWT with the relevant details to the workload. To simplify adoption, Uber built a standardized Agent-to-Agent client that provides an automatic, secure-by-default path.

uber.com · 7 min

TLDR IT

MICROSOFT, GOOGLE BACK APACHE OSSIE TO MAKE ENTERPRISE DATA AND AI PLATFORMS MORE INTEROPERABLE

Microsoft and Google have joined an open-source effort to make semantic models portable across analytics, data, and AI platforms, alongside companies including Salesforce, Snowflake, Oracle, Nvidia, and Databricks. If it works, enterprises could reuse business definitions and data models across systems such as Power BI and BigQuery instead of rebuilding them inside every platform - although analysts say governance and vendor-specific differences remain obstacles.

cio.com · 6 min

TLDR DevOps

CLOUDFLARE CONTAINERS, REBUILT TO SCALE AGENT SANDBOXES

Cloudflare has rearchitected its Containers service to handle agent workloads, allowing code to select the image and instance type at runtime. The update introduces a new scheduling policy that starts containers six times faster, with median startup times falling from over four seconds to 648 milliseconds in independent benchmarks. A filesystem snapshots feature is also available in public beta to let workspaces save and restore their state.

blog.cloudflare.com · 15 min

TLDR IT

VULNERABILITY DISCOVERY AND EXPLOITATION TRENDS IN THE AI ERA

The Google Threat Intelligence Group examined vulnerability disclosure and exploitation trends from January 2025 through August 2026 and found that AI is measurably changing the pace, types, and risk profiles of discovered vulnerabilities. Researchers report that monthly vulnerability disclosures doubled and in-the-wild exploitation nearly doubled, driven by automated disclosures and the rapid weaponization of n-day vulnerabilities using AI tools.

cloud.google.com · 13 min