Friday Squid Blogging: Rotting Squid on a Beached California Boat Smells awful : > But an estimated 30 to 50 tons of dead squid remain inside the boat’s catch tank, where they have been decomposing …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
Using AI for Weapons Development Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this: > We …
Microsoft’s Patching Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record : > Microsoft’s patch for September is a doozy, with a record number of …
Upcoming Speaking Engagements This is a current list of where and when I am scheduled to speak: I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026 at 5 PM …
On the NSA’s Supercomputer from the 1960s Really interesting story about Harvest, a specialized code breaking computer built in the 1960s by IBM for the NSA. Tags: history of computing , history of …
25 Years of Mass Surveillance Is Enough This essay was written with Cindy Cohn, and originally appeared in Lawfare . One of the many legacies of the terrorist attacks of Sept. 11 is the …
** The Hacker News ** Sep 16, 2026 Threat Intelligence / Security Validation A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can …
** Ravie Lakshmanan ** Sep 16, 2026 Vulnerability / Mobile Security Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The …
Fake CAPTCHA Scams New variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program. Tags: captchas , scams Posted on September 16, 2026 at …
ai-security
EN
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already …
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat …
ai-security
EN
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
** Swati Khandelwal ** Sep 16, 2026 Artificial Intelligence / Software Security Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider …
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle , Hacking Cat , and Toy Ghouls , according to multiple reports from Kaspersky. The …
ai-security
EN
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, …
ai-security
EN
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
** Ravie Lakshmanan ** Sep 16, 2026 Vulnerability / Web Security A critical security flaw in Issabel Framework , a web-based framework for the open-source unified communications PBX software, has come …
[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.edu BACS program] Honeypot-Omaha is a DShied Sensor located at the Internet Storm Center (ISC) that is set up as a decoy for …
ai-security
EN
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
ai-security
EN
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
ai-security
EN
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)
ISC Stormcast For Wednesday, September 9th, 2026 <https://isc.sans.edu/podcastdetail/10086>
About a week ago, Proxmox published an advisory revealing a vulnerability in older versions of Proxmox VE, its flagship Virtual Environment product. The vulnerability only affects version 7, which has …
As part of Patch the Planet , we received preview access to GPT 5.6-Cyber with a simple task: evaluate its cyber capabilities. Recent events inspired me to give it a challenge to work through: escape …
Fermat famously claimed to have a “truly marvelous proof” of his Last Theorem , but he never wrote it down, insisting the margin of his page was too narrow to contain it. A few centuries later, …