Parse notes
Sponsored
That's because agents break tools built for humans. To govern them, you need to get clarity about the 5 sources of enterprise AI risk. Airia's State of Enterprise AI Risk [5] report explains how: * Ungoverned AI is the risk that compounds every other one * Model risk does not end at deployment * Vendor-embedded agents can access enterprise systems without
* Most organizations cannot say who approved an agent's decision, or who was responsible for the policy behind it
A critical vulnerability in Bouncy Castle for Java versions before 1.86 lets attackers spoof legitimate participants and decrypt messages within Messaging Layer Security groups. Improper certificate validation in the protocol implementation lets threat actors bypass core security objectives by presenting arbitrary credentials. Developers must upgrade to version 1.86 to enforce cryptographic binding between end-entity certificates and LeafNode signature keys.
Unauthenticated attackers are actively exploiting a pre-authentication SQL injection vulnerability in Roundcube Webmail versions 1.6.0 through 1.6.15 and 1.7.0 to execute arbitrary database commands and access sensitive data. The flaw, tracked as CVE-2026-48842, resides in the built-in virtuser_query plugin. Administrators must immediately update to versions 1.6.16 or 1.7.1, or disable the vulnerable plugin.
A critical path traversal flaw in Dell System Update (CVE-2026-86360) allowed unauthenticated remote attackers to execute code as root on PowerEdge servers using the DSU deployment tool. Dell's advisory also addressed four other high-severity DSU vulnerabilities: two that enable remote code execution (CVE-2026-63697 and CVE-2026-71168) and two that enable privilege escalation (CVE-2026-86361 and CVE-2026-86362). None have been reported as exploited so far. Admins should upgrade to DSU 2.3.0.0 or later.
Fenrisk found CVE-2026-56004 in Open Build Service's obs_scm Mercurial backend. An attacker-controlled _service revision beginning with --config could set a pre-update hook and run shell commands on the service server. A space in the value bypassed Python argparse handling of dash-prefixed arguments. Exploitation required Mercurial, a reachable HTTP(S) repository, and a successful clone. Fenrisk confirmed build.opensuse.org was vulnerable. openSUSE patched the flaw on July 2 by adding -- before the revision and recommending rejection of dash-prefixed revisions.
A 2021 Reddit glitch exposed internal removal reasons in Relay notifications. Screenshots reveal domain blocks, account bans, shadowbans, Spamurai rules, and URL inspection. Spamurai logged account age, karma, reports, ISP, email domain, browser details, language headers, TLS fingerprints, and referrers. This reproduced a Perspective API score and showed that appending two letters changed a spam score from 86% to 1%. Reddit also followed redirected URLs, scanned page content, and matched a Google Analytics ID tied to a spam ring.
Northeastern researchers and Consumer Reports captured Wi-Fi traffic from 21 vehicles through a Raspberry Pi access point, decrypted 30 companion iOS apps with mitmproxy, and found that 19 vehicles contacted at least one third party, including ad and tracking domains. Seven apps sent VINs, emails, phone numbers, or precise location to trackers, and GM's four apps shared VINs with ten companies, including Meta, Google, and Acxiom. Pairing a companion app roughly doubled a vehicle's tracker exposure on average, and of 17 manufacturers contacted, most shifted responsibility to owners. One notable exception: Honda improved its data collection practices to avoid sending precise geolocation information to a third party involved in user tracking.
Guardana is an open-source AI security verification tool for security and platform engineers. It checks code and model artifacts, live AI systems, and recorded runs. It reports what it found, what it could not verify, and what it could not check. It verifies outside the request path. Guardana is not an inline guardrail, a general SAST or CVE scanner, or a compliance certification.
doxx.net has launched ADN, a private network with peer-to-peer messaging, file transfers, custom domains, and DNS threat blocking. It blocks malicious destinations before connections and uses proof-of-work accounts without usernames, passwords, or personal data.
Coi protects host credentials and files by isolating AI coding agents such as Claude Code or Codex inside Linux system containers during autonomous sessions. The open-source tool uses Incus, a lightweight LXD fork, to grant root access, systemd, and native Docker, alongside kernel-level threat detection that automatically pauses or kills compromised containers.
The Senate passed the Health Care Cybersecurity and Resilience Act by unanimous consent. The bill moves to the House. It funds prevention, incident response, and security training. It directs HHS and CISA coordination, names ASPR as sector risk manager, and requires an HHS incident-response plan.
Jordanian authorities detained alleged ShinyHunters member Saif al-Din Khader, known as Rey. Two sources said he is helping the FBI identify other members through his devices and correspondence with a sample of stolen FBI data containing employee identities, job details, and medical and psychiatric records. The group's dark-web site disappeared after another alleged member was detained in the Netherlands.
A Claude Code agent flagged a root-level Monero miner on Ben Thompson's always-on Mac Mini after attackers exploited CVE-2026-65400, a macOS screen sharing flaw, through an internet-exposed port 5900. Thompson kept screen sharing on because headless Macs need someone to click GUI-only TCC prompts, and he found that the automatic security updates setting did not cover the point release carrying the fix. He argues that Apple's planned Full Disk Access restrictions push macOS further toward a managed device, at odds with agent-driven computing.
Google paused its Open Source Software Vulnerability Rewards Program on October 1 after automated reports flooded maintainers and engineers.
Names, addresses, and CPR numbers for about 8.8 million people were exposed after attackers accessed Denmark's Central Population Register, reportedly using a Danish company's legitimate login credentials.
Linux 7.4 will support AMD Zen 6's BTB CTX Isolation, which separates user/kernel and guest/host branch predictor contexts.