Search the archive

response. Learn how to detect it.

THIS YEAR'S MODEL

Falling cost per task, increasingly capable open models, and on-device inference raise questions about frontier labs' pricing power and whether their infrastructure spending can support durable businesses.

HOW WE MADE REGISTRY METADATA 70% SMALLER

vlt reduces registry metadata by keeping install-time fields that npm's abbreviated format omits and removing signature, checksum, and attestation data while retaining tarball integrity checks.

I BUILT A NEW FEATURE FOR MY BLOG USING MY VOICE

A Django newsletter archive took shape through a half-hour voice conversation with Codex while dinner cooked, followed by another half-hour of typed review and refinements before deployment.

THE NEXT STEPS ON THE WEB AND WEBMCP

The browser already supplies much of an agent platform's identity, isolation, and user control, while WebMCP needs clearer agent permissions, operations that survive navigation, human handoffs, and coordination among assistants.

SAVE YOUR SEAT →

IRHYTHM DATA BREACH IMPACTS AT LEAST 360,000 PEOPLE

Hackers accessed third-party-hosted iRhythm applications from June 3 to June 8 and stole patient names, addresses, email addresses, birth dates, phone numbers, account details, device serial numbers, insurance numbers, and service dates. State filings cover at least 360,000 people, including 298,647 in Texas and 69,526 in South Carolina. The attackers demanded ransom on June 9. iRhythm says there is no evidence of identity theft and no impact to medical devices or operations.

CYBERXERO USES CLAUDE CODE IN CAMPAIGN THAT STOLE OVER 628,000 UKRAINIAN RECORDS

CyberXero used Claude Code, 51 agents, PentAGI, and Cobalt Strike in two campaigns. One automated WordPress and e-commerce exploitation; one manually targeted Ukrainian energy and utilities. A leaked working directory exposed session logs, plaintext tokens, toolkits, reconnaissance data, and stolen records. One run scanned 4,708 targets, reached 429 admin panels, and deployed 32 web shells in 61 seconds. Operators reset sessions and claimed authorized testing to bypass refusals.

VGHOST: BEYOND THE PRIVILEGE BOUNDARY

Vghost is a Linux vhost bug (CVE-2026-74580, CVSS 8.8) that lets any user who can open /dev/vhost-net or /dev/vhost-vsock read and write kernel memory and escalate to root. It affects kernels 4.11 through 7.2. Tencent Zhuque Lab confirmed the root exploit on five major distros and showed a malicious VM guest can use the same bug to hijack the host's QEMU process. Admins should patch to a kernel with fix de845981da67 and, until then, remove world access from both vhost device nodes, which RHEL, Amazon Linux, Azure Linux, and Oracle Linux expose by default.

A STORY OF WIFI SECRETS, UART LOCKDOWNS, AND A DAMAGED FLASH MEMORY CHIP

Researchers extracted firmware from an Eufy HomeBase 2 by desoldering its Winbond flash chip and reading it over SPI. They recovered most of firmware 3.4.2.2h, losing a 64 KB block during chip removal. Reverse engineering showed the OCEAN_ management Wi-Fi password uses HMAC-SHA256 over an I2C-read value, keyed by the device serial number, then URL-safe base64 encoding. The UART lockdown came from a login script checking an NVRAM debug flag. They patched the intact recovery image to force a root shell, reflashed it, then staged a temporary filesystem to run the main home_security binary for dynamic analysis.

HANDS OFF THE KEYBOARD: HOW AI AGENTS RUN REAL INTRUSIONS

Breachcache recovered 75 transcripts from servers used to run autonomous AI agent intrusions. The agents performed reconnaissance, selected exploits, gained command execution on 23 hosts, and, in one case, used SSRF to steal cloud instance credentials and launch a root instance. Other runs exploited SQL injection, rooted an Open WebUI service through CVE-2026-0766, and exfiltrated unmasked card data and crypto wallet keys. Operators used Cairn for coordination, rotated proxies and Tor for evasion, and audited source code to find payment-callback forgery and account-takeover flaws in AI gateway software.

(POST-QUANTUM) CRYPTOGRAPHIC RIGHT ANSWERS

The long-running "Cryptographic Right Answers" list has been rebuilt around a 2029 post-quantum deadline, and every asymmetric pick has changed: X25519+ML-KEM-768 for key exchange, HPKE with X-Wing or age PQ keys for encryption, and plain ML-DSA-44 over hybrid signatures. Former Go security lead Filippo Valsorda argues symmetric crypto stays safe because Grover's algorithm does not matter in practice. He drops OpenSSL in favor of rustls, Go's crypto/tls, BoringSSL, or AWS-LC after a run of 2026 CVEs in wolfSSL, Mbed TLS, and Botan. Several picks, including XAES-256-GCM, Cobblestone-128, and age, are his own designs, which he discloses alongside their independent adoption.

SECUDITOR LITE

Secuditor Lite is a free, Python-based diagnostic security tool for Windows endpoints and networks. Featuring a user-friendly GUI, it provides a simple and transparent way to assess system security, helping users identify vulnerabilities, suspicious activity, and misconfigurations while improving device Operational Security (OPSEC).

HADRIAN (PRODUCT LAUNCH)

Hadrian is an offensive security platform that maps external attack surfaces, validates exploitable exposures, runs on-demand penetration testing, prioritizes risks, and verifies remediation.

GH-SECURE

gh-secure is a GitHub CLI extension that enables security features on public repos. It follows best practices from The GitHub Security Lab.

NIPPON COLUMBIA MALWARE INCIDENT EXPOSES 8.6M KARAOKE FAN RECORDS

Daiichi Kosho, Japan's largest karaoke maker, disclosed that a breach at its contractor Nippon Columbia exposed the data of over 8.6M customers and almost 100K employees. The malware infection was discovered on an employee's computer and it was subsequently isolated. The exposed data may include full names, genders, dates of birth, email addresses, and phone numbers.

THREE OAUTH ACCOUNT TAKEOVERS, ONE BUG: AUTO-LINKING BY EMAIL

Attackers took over accounts in Pingvin Share X, Better Auth, and AshAuthentication by abusing auto-linking, where an OAuth sign-in is attached to whichever existing account shares its email address. Each library skipped a different check: Pingvin ignored email_verified, Better Auth never verified the local account's email, and AshAuthentication never compared the two emails, though the writeup comes from WorkOS, which sells a competing auth product. Developers should look up identities by issuer and subject ID first, require verified emails on both sides, and make users prove they own the existing account, including MFA, before any link happens.

THE PROMPT IS NOT THE PERMISSION: SECURING THE AGENTIC SDLC

Telling a coding agent what not to do does not stop it, because a malicious line in an issue, changelog, or config file can steer it into reading secrets or leaking private data while still producing a clean pull request. Real limits have to live outside the model, through isolated workspaces, task-scoped identities, short-lived credentials, and network policy. Test those limits directly, since an agent refusing a planted instruction proves nothing about whether the platform would have blocked the action.

you can focus on higher-value security tasks. Meet Robin

NORWAY FINES MICROSOFT AD FIRM $9.6 MILLION OVER GRINDR DATA SHARING

Norway's data protection authority issued its largest fine ever, $9.6M, against Microsoft-owned Xandr for exposing Grindr users' sexual orientation data to thousands of advertisers through real-time ad auctions from 2018 to 2020 without valid consent.

LEDGER SAYS ALL CONFIRMED CASES TRACE TO RESELLER CRYPTOBILIS, GIVES NO LOSS TOTAL

Every confirmed Ledger wallet drain traced back to Southeast Asian reseller CryptoBilis, though Ledger gave no loss total, while on-chain trackers estimated $93.2M to $103.4M stolen and Tether froze only about $10M before the attacker laundered funds through Tornado Cash and Zcash.

ANTHROPIC SAYS NEW SAFEGUARDS SHARPLY REDUCE AI DISTILLATION ATTACKS

Anthropic said new limits on access to Claude's reasoning cut data harvested by distillation attacks by 90% to 99%, after it banned tens of thousands of accounts and named Chinese startup Z.ai as one company that tried to copy Claude while building its GLM-5.3 model.

Take the assessment

ØRSTED BUILDS COMPLIANCE INTO AUTOMATION, SPEEDS FIREWALL CHANGES

Energy company Ørsted automated firewall change management using Nautobot, reducing some requests from weeks to around 10 minutes. The system incorporates policy validation, approvals, and audit trails, demonstrating how network automation can improve speed without sacrificing compliance.

CYBERATTACK SHUTS DOWN REFRIGERATORS AT FRENCH SUPERMARKETS

Attackers reportedly manipulated refrigeration controllers across hundreds of French supermarkets, triggering defrost cycles and causing food spoilage. The incident highlights how compromises of operational technology and third-party managed systems can create immediate physical-world disruptions.

MICROSOFT BLAMES A CONFIGURATION CHANGE FOR EXCHANGE ADMIN CENTER TUMBLE

Microsoft rolled back a configuration change after administrators were unable to access Exchange Admin Center on Monday. Access has been restored, with Microsoft reviewing the change and its monitoring after another deployment-related disruption.

RELEASING AI-GENERATED SOFTWARE

Moving toward fully AI-generated software without human code review is feasible if supported by extreme constraints and automated testing, similar to arguments made for self-driving cars. Existing legal frameworks and liability models, which often target human drivers or developers when things go wrong, are poorly equipped to handle automated systems where no one actually wrote the code.

BELOW THE FRONTIER: THE BATTLE FOR GOOD-ENOUGH AI

While consumer AI agents and frontier coding models capture current headlines and capital, the most significant future revenue battle lies below the frontier in mainstream enterprise knowledge work. As open-weight and cheaper cloud or on-device models become capable of handling bounded tasks, a massive market will emerge for everyday business applications. Winning this "Switzerland" layer requires navigating complex trade-offs in data sovereignty, local versus cloud inference, and seamless software integration.

12 STANDOUT CIO SKILLS EVERY COMPANY WANTS

Technology expertise is only part of the job: IT leaders also need financial judgment, operational understanding, clear communication, and the ability to build effective teams. This roundup emphasizes connecting investments to measurable business results and making deliberate trade-offs instead of allowing every request to become another backlog item.

INTRODUCING THE ANTHROPIC CYBER MISSION

Anthropic has launched the Critical Infrastructure Defense Program to help protect operational technology environments in sectors like water systems, power grids, and transportation. The initiative partners Anthropic with security firms and manufacturers including CrowdShield, Dragos, Nozomi Networks, and Rockwell Automation to deploy its Claude AI models and threat research for vulnerability assessment and patching. Additionally, the company introduced the OSS Scanner service to provide automated vulnerability reports to open-source software maintainers.

RASPBERRY PI DESKTOP CATCHES UP WITH DEBIAN 13 AFTER 4-YEAR WAIT

Raspberry Pi's lightweight desktop operating system for PCs and Intel Macs has returned with a Debian 13-based release. It includes a Wayland desktop and Raspberry Pi Connect remote access, but requires a fresh installation and supports only 64-bit x86 hardware, not Apple Silicon Macs.

WHY WEBMCP MATTERS

WebMCP is a crucial primitive for enabling AI agents to interact with the web through co-browsing models. By allowing sites to provide direct JavaScript tools with explicit schemas, WebMCP offers significantly faster and cheaper agentic interactions compared to traditional DOM or screenshot parsing. Furthermore, imperative WebMCP tools are necessary to complement declarative HTML semantics and effectively handle multi-step user tasks.

CELEBRATING THE BRILLIANT PRAGMATISM OF TCP/IP, THE WIRING OF THE WORLD

A look at why TCP/IP has survived decades of extraordinary growth while so many competing technologies disappeared. The argument centers on open standards, interoperability, and practical incremental improvements rather than requiring everyone to replace everything at once.

WHEN YOU JUST NEED TO BUILD A TINY DESKTOP APP: TINYJS

TinyJS uses native operating-system webviews to build small JavaScript desktop applications without bundling an entire browser engine into each app.

WHY YOUR CVE PROGRAM MISSES MOST AI AGENT VULNERABILITIES

An agent-security researcher explains why vulnerability tracking must extend beyond CVEs to include agent permissions, prompt injection, shared identities, and interactions between tools.

Vidmob, Kroger, and MMA Global built a predictive creative model

that forecast the best-converting asset 81% of the time. They found: * Reallocating existing budget could grow conversions 2.2X * Briefing against winning guidelines delivered 4X average

conversion rate lift at 70% lower cost per conversion

* Predictive creative scoring leads to better ecommerce results at the same level of spend

Read the full study results on the VidMob blog

YOUTUBE OVERTAKES TV AS TOP SOURCE OF POLITICAL NEWS

YouTube is now the most-used individual source for political and election news in the US at 16.5%, narrowly ahead of TV news at 16.1%. Social platforms collectively lead traditional news sources 60% to 32%, while 61% of Americans trust independent news creators as much as professional journalists on political topics. Credibility depends more on reporting than credentials, with 67% saying the quality of the reporting matters more than formal journalism training. Publicly correcting mistakes is the strongest trust signal, with 86% saying it increases their trust in independent creators.

THE STATE OF AI IN MARKETING: Q4 2026

More than 90% of marketers use AI, but many still rely on copying and pasting outputs instead of integrating AI into their workflows. Disconnected tools and poor data quality limit its effectiveness, while generating more content creates extra review work and can hurt customer experience. Teams need better workflow integration and data governance to realize AI's business value.

META CREATIVE ANALYSIS WITH CLAUDE

Analyze Meta ad creative performance by exporting daily ad data to a CSV and uploading it to Claude or ChatGPT. Generate 3 charts to track monthly creative churn, weekly production versus hit rate, and spend share from ads under 30 days old. Use 20-30% monthly churn and a 10-15% hit rate as benchmarks. If older ads still drive significant spend or hit rates fall while production stays flat, refresh creative before performance declines.

DON'T TEACH CUSTOMERS EVERYTHING BEFORE THEY BUY

Improve retention by separating pre-purchase education from post-purchase guidance. Before buying, explain features that build confidence in the decision. After buying, share tips that help customers get more value over time. Teaching customers things they didn't know about owning a product encourages long-term engagement.

SMART MARKETERS ARE GETTING BAD AI OUTPUTS. HERE'S WHY, AND HOW TO FIX IT (WEBINAR)

This webinar explores why ChatGPT and Claude often produce generic marketing recommendations despite strong prompts. It explains why judgment-heavy work requires specialized marketing expertise beyond language skills and access to company data. It will take place today at 11 AM ET.

HOW TO FIND OUT WHO GEMINI CITES FOR YOUR QUERY, AND WHY IT ISN'T YOU

Gemini's citations shift between runs, so a single answer says little about which pages it actually relies on. This free checker asks Gemini the same question 5 times with Google Search grounding on, then counts how often each source and claim comes back. It compares the recurring claims with a page's raw HTML, labels each one as stated, touched, or missing, and turns the biggest gaps into suggested edits using wording from cited pages.

X REBUILDS ITS THIRD-PARTY USAGE SHOWCASE

X rebuilt its API Exhibit website to showcase apps that use X data and encourage more developers to integrate its API. The updated site features official partners and public utility apps alongside agentic use cases. Developers can customize listings and submit Grok Bot templates and agent skill files.