Secure Hardware. Insecure Shipping.
We love to talk about the "hardened" part of the stack. We spend weeks arguing over whether a hardware security module (HSM) uses the right random number generator or if a seed phrase is stored in a truly isolated enclave. But most data doesn't leak through the front door; it lea
macOS Screen Sharing Vulnerability CVE-2026-65400 Fuels Monero Miner Campaign
The current consensus on the wire is simple: Apple has a critical hole in its armor. The discovery of CVE-2026-65400, an authentication vulnerability in macOS Screen Sharing that grants root access, is being framed as a systemic failure of Apple's security posture. Because it’s h
The Patches Are Ready. The Attackers Were Faster.
Babuk ransomware in your VMware vCenter. That is what pages you at 3am. It is not a theoretical risk. Two separate flaws, CVE-2026-59310 and CVE-2026-59309, are being used by China-nexus actors to drop payloads. If you manage a virtualized environment, this is your first priority
Your hosting panel is probably leaking root files
If you pay a monthly fee for a managed VPS or use a shared host to keep your business site online, you’re likely using cPanel. It’s the industry standard because it makes server management tolerable for people who aren't Linux sysadmins. But CVE-2026-29205 just turned that conven
Who Needs a Patent When You Have Cl0p?
Listen up. If you’re running PTC Windchill and you haven't checked your logs for CVE-2026-12569 in the last hour, stop reading this and go do it. Now.
French Tax Agency Admits 678k Records Stolen in Data Breach
678,000.
Microsoft WinSock Flaw Hits CISA KEV With August 25 Federal Deadline
Lazarus hitting SYSTEM access via a kernel driver is the kind of thing that wakes me up at 3am. It isn't a theoretical risk or a researcher's proof-of-concept. It is a live fire exercise.
SAP’s Cloud Has a Very Human Hole
The current buzz around the SAP Commerce Cloud exploits follows a predictable script. The consensus is that we're seeing the work of a high-tier APT. The logic is simple: since there's no public proof-of-concept (PoC) and the target is an enterprise-grade cloud environment, the a
PostgreSQL Extension Vulnerability Enables Remote Code Execution at Multiple Managed Database Providers
A researcher went looking for a managed Postgres provider and instead found a way to execute code on the servers of NeonDB, Supabase, and Xata. The culprit wasn't a failure in the core database engine or a mistake by these specific companies. It was a vulnerability in a widely us
The risk of shipping encrypted hardware
14,000.
Old Code Lives On. New Targets Fall Fast.
Twenty stories in a single week is not a trend. It's an obsession. Gunra has spent the last seven days dominating my wire, appearing in some 26 separate reports if you count the overlapping aliases. Most ransomware groups prefer to operate in the shadows until the ransom note hit
TeamPCP Supply Chain Attack Hits North of 2500 Organizations via Trivy and LiteLLM
Listen up, because you're going to see this pattern for the next decade if we don't stop pretending that "trusted" tools are actually trustworthy.
The Pipeline Is Automated. The Poison Is Efficient.
Technology is currently the most targeted sector on my wire, ranking #1 of 16 with 333 stories this week alone. That isn't just a high number; it's an obsession. While government and healthcare usually fight for the spotlight because they have "critical" infrastructure, a word I
Your Dev Pipeline Has a New Passenger
2,500.
Reverse SSH Exploits Hit VMware vCenter Management Layer in Global Campaign
The wire is currently screaming about a "global threat campaign" targeting a critical remote code execution flaw in VMware vCenter. The consensus narrative is straightforward: we are facing a sophisticated, high-tier offensive where attackers are using RCE to establish reverse SS
Who Actually Controls Belgium's eID?
Belgium's national eID authentication system has a hole that allows for remote code execution on citizen accounts. This isn't some theoretical academic paper or a low-impact bug. It's an RCE in the very mechanism used to prove who a person is to the state. When you compromise the
The Deadline is Fixed. The Window Stays Open.
CISA added CVE-2026-68820 to the Known Exploited Vulnerabilities (KEV) catalogue on 2026-08-11. For those who don't spend their Tuesdays reading federal bulletins, this is the official signal that a bug isn't just theoretical; it's being used in the wild. Along with the listing c
Ten days of downtime
10. That is the number of days the JPS network has been offline following a suspected breach.
Your Firewall is Feeling Neglected
The weekly ritual of the patch cycle is less about security and more about the performative management of anxiety. Every sysadmin has a dashboard that looks like a crime scene, bleeding red alerts across a dozen different vendors. The instinctive reaction is to treat it as a chec
The Firewall Was Active. Gunra Walked In Anyway.
The reports coming off the wire this week regarding Gunra ransomware are frustratingly predictable. We're seeing a surge in activity, 19 distinct stories in the last seven days alone, focused on critical infrastructure breaches via Fortinet vulnerabilities. For the uninitiated, t
Every edition runs in one of these standing sections. How stories are chosen.