7 min read
Fortinet confirmed October 1 that CVE-2026-104286, a critical RCE vulnerability in FortiMail, is being actively exploited in zero-day attacks. The device you…
7 min read
The attachment is an invoice, a contract, something boring enough that a finance lead opens it on reflex. Click through, and you…
8 min read
Anthropic's MCP Python SDK shipped with a flaw that let malicious servers extract OAuth credentials during connection setup—no prompt injection required. If…
6 min read
A single-region outage is a blown fuse; you flip the breaker and move on. A network event that touches 19 regions tests…
5 min read
A point release with no release notes is a dare—Apple bets you'll deploy without checking. I checked: LocalAuthentication untouched, passkey sync intact,…
6 min read
My Argon invoice for one afternoon of evals came back at almost double what the same work costs me on Astra. The…
7 min read
Microsoft confirmed web shells on internet-facing mail servers, deployed through an unauthenticated command injection that requires nothing but network reach. If your…
4 min read
Microsoft 365 Groups can host email conversations through a distinct Graph API that standard group queries never touch. If your lifecycle policies,…
4 min read
VoidProxy fingerprints every request before deciding what to serve. Security scanners see benign content; real users get a live credential-stealing proxy. By…
6 min read
The migration tracker said 100%. Green across every subscription. Then the morning after NVv3 retirement, a render node in a forgotten subscription…