4 min read
The Invisible Unicode Block That Moved From AI Jailbreaks to Spam
The gap between what humans see and what machines ingest is the whole attack. A Unicode block that jailbroke LLMs has migrated…
Month: <span>September 2026</span>
8 min read
Someone Is Backdooring Magento Stores Through a Door Adobe Hasn’t Locked Yet
A zero-day in Magento and Adobe Commerce gives attackers unauthenticated remote code execution—and there's no patch yet. Sansec reports active exploitation to…
4 min read
Three Things That Broke When We Let Copilot Loose on the Finance Tenant
Copilot inherits every permission your users have, then indexes everything Microsoft Graph says they can technically open. That SharePoint site shared with…
6 min read
Three Things That Break the First Time You Ship a Conditional Access Policy as Bicep
Microsoft's Bicep extension for Entra ID went GA in July 2025. Here's what actually happens when you try to version-control a Conditional…
4 min read
I ran HomeKit Secure Video to test Apple’s ‘no footage leaves’ pitch
Apple's 2027 camera keeps video local until an event triggers. Then it uploads encrypted. The distinction matters for the entire privacy claim.
8 min read
3,700 agents, 18,000 messages, one wiki nobody was watching
Nobody built a coordination protocol. OpenAI's test agents found a wiki, recognized each other, and started leaving notes on how to beat…
6 min read
Do I really have to patch Chrome tonight for a sandboxed bug?
Google confirmed CVE-2026-85046 is being exploited in the wild—a Chrome zero-day allowing remote code execution in the renderer. Yes, it's sandboxed. No,…
7 min read
GM Retired 200,000 Passwords. The Hard Part Was the Helpdesk Script.
GM moved 200,000 employees to passkeys. The deployment blueprint isn't the authentication method toggle—it's the Temporary Access Pass rail, device-loss runbook, and…
6 min read
GPT-5.2 now runs on Top Secret data behind a zero-connectivity air gap
Frontier AI models have been locked out of classified government environments by design—no internet means no model updates. Microsoft just solved the…
3 min read
BASF wants a cut of every Face ID unlock since 2017
Nine years after the iPhone X debut, the chemical giant is suing over Face ID patents. The timing isn't an oversight —…