Daily news, analysis and practical guides explaining what happened, who is affected and what to do next. We also turn this knowledge into practical training for organisations.
AI Security OpenAI announced Project Camellia — a 3.2 GW data center campus in Georgia costing over $30 billion. We sum up the facts and what they say about AI's bottleneck.
Vulnerabilities and CVEs CVE-2026-8933 is a race condition in snap-confine that gives a local user root on default Ubuntu Desktop 24.04, 25.10 and 26.04. How to patch it, and why.
AI Security The US is finalising a voluntary framework giving agencies up to 30 days to review frontier models before release. We explain what is confirmed and what is still in progress.
AI Security At Advancing AI 2026 AMD unveiled Instinct MI400, EPYC 9006 and the Helios platform. We sum up the confirmed facts and what they mean for enterprises and sovereign AI.
Threats and Incidents Cisco Talos detailed msaRAT — a Chaos-group trojan that runs C2 through Chrome/Edge and WebRTC to evade network detection. We explain the mechanism and defence.
Vulnerabilities and CVEs CVE-2026-16232 (CVSS 9.1) lets an unauthenticated attacker take over SmartConsole with admin rights. It is in CISA KEV and actively exploited — patch now.
AI Security Researchers detailed SharedRoot (CVE-2026-46331) — a Claude Cowork agent escaping its local sandbox to files on the Mac. What it means for agent security.
Careers and Certifications Learn penetration testing from zero. The free Pentester Path at BreachRoad Academy: 13 modules, Kali Linux, knowledge tests, XP and ranks. Watch the video.
AI Security The OSTP director accused Moonshot AI of distilling Anthropic's model to build Kimi K3. We separate fact from claim and explain what it means for companies.
AI Security OpenAI launched Presence — a platform for deploying AI agents in enterprises. We analyse what it genuinely adds to security and what the customer must still own.
Vulnerabilities and CVEs CVE-2026-64600 (RefluXFS) gives a local user root through an XFS race condition. See which distributions to patch and why the reboot matters.
Threats and Incidents A joint government advisory detailed a campaign abusing an XSS in Zimbra (CVE-2025-66376) to steal mail, passwords and 2FA codes. Who it hits and what to do.
AI Security Claude Code 2.1.217 limits subagents and closes isolation gaps. Review the security impact, configuration choices and a safe upgrade plan.
AI Security Applied Intuition has launched Dana for physical AI. Explore its capabilities, industrial uses and the security controls every deployment needs.
Human Security Explore a free SOC analyst course with 32 modules, 316 lessons, quizzes, and worked analysis from triage and SIEM to OT, AI, and crisis response.
Once a month, a concise summary of the vulnerabilities and threats that matter. No spam, unsubscribe anytime.
