Cybersecurity
An AI Auditor Missed the Linux Bug That Gives Root
Bad Epoll (CVE-2026-46242) hands any local user root on Linux 6.4 and newer, including Android. The fix has been in mainline since April but many distros have not shipped it.
Cybersecurity
Cybersecurity
A 29-Year-Old Squid Bug Leaks Cleartext Logins
Squidbleed (CVE-2026-47729) is a one-line flaw that let any user of a shared Squid proxy read other people's cleartext HTTP requests, including passwords and session tokens. It hid in default configs for 29 years, and an AI agent found it, not a human audit.
Cybersecurity
This Malware Deletes Your Backups First
A new attack kit called Avalon hunts your backup servers and deletes Windows shadow copies before its CrownX ransomware encrypts anything. It sat undetected for four months while evading nine major security tools.
Cybersecurity
A Linux Root Bug Now Hits Servers and Android Phones
CVE-2026-46242, Bad Epoll, lets any local user become root on Linux 6.4+ servers and Android at 99 percent reliability. What owners of Linux fleets should do now.
Cybersecurity
One Coder's Filesystem Sits in Millions of Devices
Seven FatFs bugs, six of them unpatched, ship inside cameras, drones, ATMs and crypto wallets via ESP-IDF, STM32Cube and Zephyr. Why owners must audit their device bill of materials.
Cybersecurity
The SharePoint Patch You Skipped in May Is Now Urgent
CISA added SharePoint flaw CVE-2026-45659 to its exploited-vulnerabilities list on 1 July. Microsoft rated it unlikely to be attacked. The patch has existed since May, and under NIS2 the clock is yours.
Cybersecurity
81 Million Logins Hit Microsoft 365 in Two Weeks
A password-spray campaign threw 81 million login attempts at Microsoft 365 in two weeks and got past multi-factor authentication - not with a new exploit, but by abusing a legacy sign-in path that skips MFA.
Cybersecurity
Microsoft Pulls the Quantum Deadline to 2029
Microsoft has pulled its quantum-safe deadline forward four years to 2029. The reason is not future quantum computers. It is the data being stolen today.
Cybersecurity
Two Cursor Flaws Rated 9.8 Hand a Developer's Machine to Attackers
Two critical Cursor flaws rated 9.8 let a poisoned web page or tool result seize a developer's machine. What DuneSlide means for owners, and what to do this week.
Cybersecurity
One Supplier Breach Drove Half of Europe's Ransomware Victims
Black Kite's 2026 report shows one supplier breach drove over half of Europe's third-party ransomware victims. Under NIS2 and DORA, the liability is yours.
Cybersecurity
Jailbreak Risk Now Has a Severity Score
Anthropic's Cyber Jailbreak Severity scale turns AI safety into a procurement and audit criterion, the way CVSS did for software bugs. What owners should demand.
Cybersecurity
Cybercrime Borrows Your Home Internet
Google and the FBI disrupted NetNut, a residential proxy network of at least 2 million home devices used by 316 threat clusters in one week. Why IP reputation is dead and your devices are the new perimeter.
Page 15 / 17
The Operator Brief
One considered note on infrastructure, governance, and measurement, most mornings. No theory.