Blog
Writing about AI — how it works, where it helps, and what we learn building with it.
Latest posts
The FBI Seized Flax Typhoon's Tools for the Second Time in Two Years. The CVE List Is the Part Defenders Should ReadThe Justice Department seized the domains behind Microscan and FishHub, two tools it says Integrity Technology Group operated for China-linked hackers who scanned a US power company, Japanese and Polish airports, and Taiwanese energy firms. The accompanying seven-nation advisory shows the platform ran almost entirely on vulnerabilities patched years ago.Security
Attackers Hijacked Three Country-Code Registries and Got Valid Google Certificates. Nothing in the Chain MalfunctionedAttackers compromised the third-party operators of .gh, .sl and .as, changed the authoritative DNS records, and used that control to obtain publicly trusted HTTPS certificates for Google and YouTube domains. Google says neither its own systems nor the issuing certificate authorities did anything wrong — which is precisely the problem.Security
Atlassian's CVSS 9.3 File-Read Flaw Is Being Exploited. The Advisory Lists Every Version of Eight Products as AffectedCVE-2026-21589 lets an unauthenticated attacker read files from the web root of eight self-hosted Atlassian products, and a security firm says exploitation attempts hit its honeypots within two hours of a public proof-of-concept. Atlassian Cloud is unaffected; every released version of the Data Center products is not.Security
Denmark Has Lost the Name, Address and CPR Number of 8.8 Million People. Nothing Was Broken Into — a Licensed Company's Access Was Used as DesignedUnauthorised parties pulled the name, address and CPR number of 8.8 million people out of Denmark's Central Person Register through a private company's legitimate access, running unnoticed for a month. The register's defences were never touched.Security
Google Has Frozen Its Open-Source Bug Bounty Because of Machine-Generated Reports. curl Got There First, for the Same ReasonGoogle has stopped accepting product vulnerability reports for its own open-source projects, citing a surge in automated submissions that are mostly invalid. It kept supply chain reports open, and that split says what the real problem is.Security
Citrix Has Patched Another Exploited NetScaler Zero-Day Eight Days After the Last Ones. This One Was Found Because Already-Patched Appliances Kept RebootingCitrix shipped builds on October 4 for CVE-2026-88779, a memory overflow in NetScaler's SAML authentication path, and CISA added it to the KEV catalog the same day with an October 7 federal deadline. The appliances that surfaced it were already running September's emergency fix.Security
A Federal Judge Has Called Flock's Camera Network Indiscriminate Mass Surveillance. The Evidence She Suppressed Was 91 Pounds of MethamphetamineA federal judge in Oklahoma has held that pulling a month of a driver's movements out of Flock's licence plate network without a warrant violated the Fourth Amendment, and suppressed everything that followed — including 91 pounds of methamphetamine. The ruling binds no other court, which is why the number matters.Security
India Has Had Bitchat Pulled From Both App Stores. The App Needs No Servers, but It Still Needs a StoreIndia's IT ministry has had Jack Dorsey's Bluetooth mesh messenger removed from the App Store and Google Play under Section 69A, and the order itself is confidential. Bitchat was built so there would be no server to seize — but distribution was never decentralised.Security
A Second ShinyHunters Figure Is in Custody, and This One Is Walking the FBI Through His Own Devices. The Group's Channels Went Dark the Same DayReuters reports that Saif al-Din Khader — the hacker known as "Rey" — was detained in Jordan on Tuesday and is helping the FBI identify the rest of ShinyHunters. The detention rests on anonymous sources, but the group's communication channel went unreachable the same day and its leak site was gone by Wednesday.Security