The compressor you didn't know you were using
A flaw in the Brotli compressor set off emergency patches for Node.js, .NET, PHP and Python within a week. Do you know where it sits in your stack?
Posts
News analysis, roundups and my own research, newest first.
The AI didn't escape. It was just given too much access
OpenAI research models paid from a stranger's wallet and reached protected data mid-task. Not a rebellion: just permissions that were far too broad.
Zero trust against the rise of the machines: the chief's workflow
From the morning news flood to a verified article, with two human gates. Who does what on the crew, and what we never leave to the AI.
News DDOS: 34 stories we tracked this week
The week's news flood in one table: 34 stories that made it through our first filters, with scores and the most authoritative source.
Updates: AI agents behind ConnectWise, PHP2Shell reaches Hungary
What we've learned about ConnectWise and PHP2Shell since our posts went live, and what it means for what you should do.
Weekly roundup: they didn't break your door, they used your key
The week's key stories along one thread: backup software, developer platforms, AI keys and a scam app. Every time, the weak spot was a key someone had been trusted with.
PHP2Shell: check today which PHP runs under your website
Two critical PHP flaws are already under attack. The fix is out, but the update often depends on your hosting provider.
Your key hangs on your provider's key ring
A stolen backup key let attackers into business Microsoft 365, no password or MFA. What to ask your IT partner now.
When the hacker switches off the fridge
In a single night, fridges warmed up in hundreds of French supermarkets because someone rewrote their settings remotely. Nobody had to break into a single store. Building systems are the least guarded door.
The scammer knows what you bought on Tuesday
Kifli.hu's customer service chats have leaked. What a scammer can do with them, and what every company can learn.
The security chief brings in an AI crew
Three ransomware attacks by breakfast, two new critical flaws by lunch, and by evening someone is remotely switching supermarket fridges on and off. Twenty years in, I'll admit it: I can't keep up alone anymore. So I'm doing what a security chief does in a situation like this. I'm looking for a new solution.
