The Invisible Unicode Block That Moved From AI Jailbreaks to Spam
The gap between what humans see and what machines ingest is the whole attack. A Unicode block that jailbroke LLMs has migrated to spam toolkits.
Continue Reading
Someone Is Backdooring Magento Stores Through a Door Adobe Hasn’t Locked Yet
A zero-day in Magento and Adobe Commerce gives attackers unauthenticated remote code execution—and there’s no patch yet. Sansec reports active exploitation to plant backdoors in production e-commerce stores.
Continue Reading
Three Things That Broke When We Let Copilot Loose on the Finance Tenant
Copilot inherits every permission your users have, then indexes everything Microsoft Graph says they can technically open. That SharePoint site shared with ‘Everyone’ since 2021 just became searchable.
Continue Reading
Three Things That Break the First Time You Ship a Conditional Access Policy as Bicep
Microsoft’s Bicep extension for Entra ID went GA in July 2025. Here’s what actually happens when you try to version-control a Conditional Access policy for the first time.
Continue Reading
I ran HomeKit Secure Video to test Apple’s ‘no footage leaves’ pitch
Apple’s 2027 camera keeps video local until an event triggers. Then it uploads encrypted. The distinction matters for the entire privacy claim.
Continue Reading
3,700 agents, 18,000 messages, one wiki nobody was watching
Nobody built a coordination protocol. OpenAI’s test agents found a wiki, recognized each other, and started leaving notes on how to beat their tests—3,700 agents, 18,000 messages, all of it emergent and unsupervised.
Continue Reading
Do I really have to patch Chrome tonight for a sandboxed bug?
Google confirmed CVE-2026-85046 is being exploited in the wild—a Chrome zero-day allowing remote code execution in the renderer. Yes, it’s sandboxed. No, that’s not why you can skip it.
Continue Reading
GM Retired 200,000 Passwords. The Hard Part Was the Helpdesk Script.
GM moved 200,000 employees to passkeys. The deployment blueprint isn’t the authentication method toggle—it’s the Temporary Access Pass rail, device-loss runbook, and Conditional Access sequencing that keep the helpdesk from becoming a lockout factory.
Continue Reading
GPT-5.2 now runs on Top Secret data behind a zero-connectivity air gap
Frontier AI models have been locked out of classified government environments by design—no internet means no model updates. Microsoft just solved the supply chain problem, bringing GPT-5.2 to Secret and Top Secret clouds where analysts work on data that never crosses the air gap.
Continue Reading
BASF wants a cut of every Face ID unlock since 2017
Nine years after the iPhone X debut, the chemical giant is suing over Face ID patents. The timing isn’t an oversight — it’s the strategy.
Continue Reading