Blog
Writing about AI — how it works, where it helps, and what we learn building with it.
Latest posts
A Forensics Vendor Told Police It Can Keep a Seized iPhone Unlocked Indefinitely. The Video Making the Claim Is Eighteen Months OldA leaked law-enforcement training video reviewed by 404 Media shows Magnet Forensics marketing a way to hold a seized iPhone in its After First Unlock state through Apple's 72-hour Inactivity Reboot. The capability is an unverified vendor claim; the eighteen months between the video and its disclosure is not.Security
FortiMail's Exploited Zero-Day Has a Sunday Deadline and No Shipped Patch. Compliance Means Switching Features OffFortinet disclosed CVE-2026-104286, an unauthenticated 9.8-rated flaw in FortiMail already exploited in the wild, and CISA set an October 4 federal deadline the same day. The fixed builds had not shipped, so the only levers before Sunday are turning Identity-Based Encryption off and taking the management interface off the internet.Security
Police Seized 110 Terabytes From KillSec. The Alleged Administrator Is 16 and the Way In Was Cloud StorageEurojust and Europol announced on October 1 that a nine-country operation dismantled the KillSec ransomware-as-a-service group, seizing five servers, its leak site and more than 110 terabytes of stolen data. The suspected administrator is 16, and roughly 500 successful attacks involved no novel exploit at all.Security
Bitget's Root-Cause Report Says the Attackers Came In Through Its Security Products. The Appliance That Watches Everything Can Also Reach EverythingBitget published its breach findings on September 30: a zero-day in a third-party security appliance gave attackers a foothold on August 31, three and a half weeks before $387.5 million left its wallets. The defensive control was not bypassed — it was the route in.Security
The FBI Made a Video for ShinyHunters' Remaining Members. The Arrest It Announced Happened Two Weeks AgoDutch police arrested an alleged ShinyHunters leader on 15 September; the FBI made it public this week alongside a video telling everyone still in the group to come forward. The Bureau put numbers on the crew for the first time — 140 organizations, $70 million — and the reason it is spending this much attention is the group's own decision to go after FBI personnel records instead of money.Security
The Only Apple Devices Exposed to This Zero-Day Are the Ones That Haven't Updated Yet. Meta Found It, Not a Human-Rights LabApple patched CVE-2026-86950, an exploited CoreGraphics flaw, in iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1 — but not in iOS 27, which was never affected. The exposed population is precisely the one that defers updates, and the bug was reported by Meta's product security team rather than the usual watchdogs.Security
Citrix Confirmed Two Exploited NetScaler Zero-Days on Sunday. Admins Had Already Shut the Appliances Down Without Being Told WhyCitrix published bulletin CTX697096 on September 27 covering eight NetScaler flaws, two of them 9.5-rated remote code execution bugs it says are already being exploited. The warning reached administrators two days earlier through suppliers and national CERTs, with no detail attached — and that informal channel is now how edge-appliance disclosure actually works.Security
€95 Million Left Italy's Biggest Private Bank on a WhatsApp Message and One Phone Call. The Deepfake Is the Least Interesting PartFraudsters impersonating Intesa Sanpaolo's CEO and a real lawyer moved €95 million out of Fideuram in February; €53 million was clawed back and at least €36 million is gone. The cloned voice was not the failure — it was the verification step, supplied by the attackers.Security
ShinyHunters Went Back for the PeopleSoft Servers That Got a WAF Rule Instead of the Patch. Google Has Notified Over 100 More OrganizationsGoogle Threat Intelligence says ShinyHunters is exploiting CVE-2026-35273 in Oracle PeopleSoft again, and is specifically hitting organizations that deployed June's recommended firewall rule without applying the patch. The mitigation has stopped working as a defence and started working as a target list.Security