Muse Creates Detailed Profiles of All Your Friends and Family
Welcome to Kernel Panic!, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To…
Month: October 2026
Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands
GitLab has issued emergency security updates for a critical vulnerability in its Self-Hosted AI Gateway that could allow authenticated attackers to execute arbitrary commands on…
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that attackers breached its infrastructure through two previously unknown vulnerabilities in Zammad, the open-source customer-support and…
New infosec products of the week: October 2, 2026
Here’s a look at the most interesting products from the past week, featuring releases from BlackFog, Genea, Vega, and Thales. Vega II brings security-trained AI…
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
Ravie LakshmananOct 03, 2026Cyber Espionage / Artificial Intelligence The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China…
DWP insources Universal Credit checking work
The Department for Work and Pensions (DWP) is insourcing 2,700 staff from an outsourcing supplier and will now complete Universal Credit Review (UCR) work in-house.…
doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures
Miami, FL-based doxx.net has raised $38 million in a Series A funding round led by Andreessen Horowitz, with participation from Animo Ventures and Focal.vc. The…
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed Pierluigi Paganini October 03, 2026 GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape…
Building for good: How civil society organizations are automating on Cloudflare
Tracking how governments target dissidents living in exile. Helping people in crisis find mental health support. Advocating for legislation that protects free expression online. These…
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Article written by Andrius Buinovskis, VP of product strategy at NordLayer EDR remains necessary when attackers execute code on the host. The problem starts if…
Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
Dell has released security update DSA-2026-448 to address multiple critical vulnerabilities in its Container Storage Modules, including flaws that could allow unauthenticated remote attackers to…
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure.…