
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Google is rolling out Gemini 4 Argon to trusted cyber defenders via its Fairwind Program with a planned guardrail-free variant for full defensive capabilities.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

Google is rolling out Gemini 4 Argon to trusted cyber defenders via its Fairwind Program with a planned guardrail-free variant for full defensive capabilities.

A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.

Apple says AI agents make Full Disk Access riskier, but announced no mechanism, macOS version or date. The real boundary sits inside the app holding the grant.

A 9.9 template-injection flaw in GitLab's self-hosted AI Gateway lets any Duo Agent Platform user escape the prompt sandbox. The fix is three patch versions.

Autonomous agents made 200,000 requests to a US Department of Education site and threw 13 payloads at Library and Archives Canada. Nothing leaked.

A 9.8 path traversal plus NULL byte flaw in FortiMail is under attack. The workaround is three CLI lines, and it does nothing for boxes already written to.

A 9.8 pre-auth integer underflow in RouterOS web management. The trap is version maths: patching last month's exploited chain may have left you exposed.

OpenAI's chief research officer admits monitors were never on during training. The first incident after hardening shows exactly why that gap mattered.

Cloudflare plans a public CA with GlobalSign root material and Merkle Tree Certificates from Q1 2027 — post-quantum TLS that still works on old devices.

Microsoft ties NeedyMantis to China-linked Storm-3069 — DLL sideloading, custom archives and WebSockets C2 built to outlast the initial breach.

NVIDIA split agent safety into two layers: OpenShell sandboxes the agent, Sentry watches it from BlueField-4 silicon. The split is the actual idea.

Park24 confirmed 6.6 million Times Car accounts were taken, licence images included. This is a data-model leak, not a credential leak.