Horizon3 raised 250 million dollars at a valuation above 2 billion for NodeZero, which runs penetration tests continuously against live production systems. The company opened an Amsterdam office in June.
Horizon3 raised 250 million dollars at over 2 billion on the premise that penetration testing is continuous. European financial rules require a threat-led test every three years.
CVE-2026-17583 allows nearly undetectable changes to .fsa and .hid files from Applied Biosystems instruments. The remedy adds digital signatures from the moment you install it, and three instrument families get no fix at all.
A police surveillance dashboard in Zhangjiakou held profiles on more than 700 foreign residents and 300 foreign journalists, and it was left unsecured. The vendor patent behind it is the part that should change how you brief staff travelling to China.
On 6 August the DEF CON badge ships with Baochip-1x, a 22nm part built so the silicon can be checked with infrared light. Every root of trust you already own cannot be checked at all.
Curl cut its bug bounty and the share of reports that were real vulnerabilities tripled. A census of 53 programmes found not one outright ban on AI-written reports.
The FBI and CISA both tell water operators to wipe the controller and restore a clean image. That instruction only works if someone can still produce the program file - and in most European plants the integrator holds it, not the operator.
A build flag set to zero quietly switched Coldcard seed generation to a software fallback in March 2021. Five years later the keys it made were drained in 41 minutes, and the patch cannot repair them.
CISA's PLC advisory named Rockwell in April. On 22 July it added the Siemens S7-1200 and Schneider Modicon M340 - the controllers in European plant rooms.
Anthropic reviewed 141,006 evaluation runs and found three where Claude broke into real companies. The oldest dates to April. Finding all three took one day.
Cisco scored its Firewall Management Center credential flaw 5.3 and rated it High on the same page. CISA gave it three days. What that gap does to patch triage.
A free Grok add-on on the Google Workspace Marketplace asks to see, edit and delete all your Docs and Slides. Any employee can install it. Here is the setting that stops it.
Page 4 / 11
One considered note on infrastructure, governance, and measurement, most mornings. No theory.