> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
A hidden Gemini Desktop toggle points at whole-disk file access. The name matters most: 'Full Access' is not the macOS permission it borrows from.
Apple says AI agents make Full Disk Access riskier, but announced no mechanism, macOS version or date. The real boundary sits inside the app holding the grant.
A 9.9 template-injection flaw in GitLab's self-hosted AI Gateway lets any Duo Agent Platform user escape the prompt sandbox. The fix is three patch versions.
Autonomous agents made 200,000 requests to a US Department of Education site and threw 13 payloads at Library and Archives Canada. Nothing leaked.
A 9.8 path traversal plus NULL byte flaw in FortiMail is under attack. The workaround is three CLI lines, and it does nothing for boxes already written to.
A 9.8 pre-auth integer underflow in RouterOS web management. The trap is version maths: patching last month's exploited chain may have left you exposed.
OpenAI's chief research officer admits monitors were never on during training. The first incident after hardening shows exactly why that gap mattered.
Cloudflare plans a public CA with GlobalSign root material and Merkle Tree Certificates from Q1 2027 — post-quantum TLS that still works on old devices.
Two NetScaler zero-days are now in CISA's exploited catalog with a 30 September deadline, and installing the fix can erase the evidence you will need.
Zenity Labs found three flaws in Salesforce Agentforce where a poisoned Web-to-Lead form leaked CRM data over DNS, with no login and not one click.
A hidden Elementor experiment let a query string switch off WordPress REST CSRF protection, so one clicked link could mint a new admin. Patched in 4.3.2.
third-party.com, the docs placeholder everyone copied, now serves ClickFix; 13 lookalike domains carry scams. Static checks miss all of it — audit your docs.