GitHub Made AI Scan for Pull Requests Generally Available and It Still Will Not Fail Your Check
AI findings for PHP, Terraform, Dockerfiles and more. Advisory only. Cannot fail checks or block merges. Useful signal, not a force field.
Read Full News
The FBI Says Midterm Season Is Open Season on Your Wallet and Your Voter File
Fake PACs, fake merch, fake voter links, AI voice clones. vote.gov for registration, FEC for committee checks, IC3 for reports.
Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp
Exploitation since October 7, hotfixes that actually close the door, KEV on October 14. Hunt MicrosoftEdgeUpdateSvc and rebuild dirty boxes.
Atlassian Just Handed Strangers Your WEB-INF and CISA Put It on the Calendar
Unauthenticated file read across eight Atlassian Data Center products. KEV on October 15, due October 18. Patch, mitigate, rotate Crowd secrets.
GitHub Security Lab Open-Sourced an LLM That Babysits AFL++ So You Do Not Have To
Point it at owner/repo, get harnesses, coverage loops, and review-required vulnerability reports. Disposable VM required. Blind merges forbidden.
French Supermarket Fridges Hit 50C and Suddenly Everyone Cares About OT
EOL controllers on public IPs, melted inventory, political statements about weaponised food. The fix was network exposure hygiene, not another webinar.
That Party RSVP Installs ScreenConnect, Not Confetti
Vague invite, baby-domain CAPTCHA, zip, legitimate remote-support installer. Your tray icon is their shell.
Hunt PAN-OS CVE-2026-0322: Three Attacker IPs and Management Plane Logs
Authenticated root RCE on the management interface, KEV the day of disclosure, three IPs in the advisory. Here is a lab grep session so you can hunt before the jump box excuse wears thin.
Cisco Secure Email Gateway Just Got Rooted by the Attachment It Was Scanning
Unauthenticated root via a crafted attachment on File Reputation. Patched builds from September, exploitation notice and KEV in mid-October. Check contentscannerstatus.
Hunt FortiMail CVE-2026-104286: archive234, ld.so.preload, and Bad Base64
Fortinet published hashes, IPs, and an archive account named archive234. Here is a lab grep-and-hash session so you can find tenants who moved in before the patch.