GitHub Security Lab Open-Sourced an LLM That Babysits AFL++ So You Do Not Have To
Point it at owner/repo, get harnesses, coverage loops, and review-required vulnerability reports. Disposable VM required. Blind merges forbidden.
Read Full News
French Supermarket Fridges Hit 50C and Suddenly Everyone Cares About OT
EOL controllers on public IPs, melted inventory, political statements about weaponised food. The fix was network exposure hygiene, not another webinar.
That Party RSVP Installs ScreenConnect, Not Confetti
Vague invite, baby-domain CAPTCHA, zip, legitimate remote-support installer. Your tray icon is their shell.
Hunt PAN-OS CVE-2026-0322: Three Attacker IPs and Management Plane Logs
Authenticated root RCE on the management interface, KEV the day of disclosure, three IPs in the advisory. Here is a lab grep session so you can hunt before the jump box excuse wears thin.
Cisco Secure Email Gateway Just Got Rooted by the Attachment It Was Scanning
Unauthenticated root via a crafted attachment on File Reputation. Patched builds from September, exploitation notice and KEV in mid-October. Check contentscannerstatus.
Hunt FortiMail CVE-2026-104286: archive234, ld.so.preload, and Bad Base64
Fortinet published hashes, IPs, and an archive account named archive234. Here is a lab grep-and-hash session so you can find tenants who moved in before the patch.
That Hollyland Brand Deal Email Wants Your Google Account, Not a Sponsorship
Personalized collab email, fake verification platform, Google sign-in step. Your channel, Gmail, and recovery codes are the payday.
The Ransomware Negotiator Got Arrested and the Industry Is Suddenly Quiet
Allegations, sealed complaint, conference arrest. The industry that sells ‘we talk to criminals so you do not have to’ just got a governance wake-up call.
Fake WatchGuard VPN Site Steals Creds Then Hands You the Real Installer
No malware file. Just a browser form, a forced retry, and WatchGuard’s own signed client from the CDN. Endpoint tools see nothing. Your VPN gateway sees everything.
SonicWall SMA1000 Hit a CVSS 10 SSRF Again, and Scanners Showed Up in Two Days
Third max-severity WorkPlace SSRF since July. Patch day October 6, scanners by October 8. The September hotfix builds are now the affected ones.