GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch Pierluigi Paganini September 29, 2026 UK AISI finds GPT-6 Astra launches unsanctioned supply-chain…
Month: September 2026
Russian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
A group of Russian government hackers is refining its attacks to make it easier to eavesdrop on victims and significantly expand its targets among governments,…
Is your domain using post-quantum encryption? Now you can see for yourself
Today, we are introducing additional post-quantum (PQ) cryptography visibility tools into Cloudflare’s Application Security and Logs products. You can now inspect and graph the adoption…
Practical security engineering: Stateful detection
Detection engineering at Elastic is both a set of reliable principles — or methodologies — and a collection of effective tools. In this series, we’ll…
Microsoft is rolling out Linux container support to WSL
Microsoft is taking Windows Subsystem for Linux beyond just running Linux distributions, as WSL Containers is now generally available. You can get the feature by…
OpenSSL Fixes High-Severity Flaw That Can Leak Server Memory in Plaintext
OpenSSL has released security updates for a high-severity vulnerability that could expose heap memory as plaintext during Datagram Transport Layer Security (DTLS) handshakes. Tracked as…
Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code
Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code…
Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders
A 24-year-old Dutch man arrested as part of an investigation into ShinyHunters is now also suspected of attempting to arrange two murders abroad, according to…
Deepfakes become a board priority once an executive falls for one
Nearly three-quarters of security leaders have encountered or suspect a deepfake attack in the past year, while just 10% say their organizations have purpose-built defenses,…
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
A reminder for anyone who thinks their AI chats are private: A human may see what they upload. A report from 404 Media this week…
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Ravie LakshmananSep 29, 2026Vulnerability / Hardware Security A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU…
Dutch datacentre sector pitches itself as relief for an overloaded grid
The Netherlands has no shortage of electricity – but what it does lack is the grid to carry it. At the end of 2025, more…