News that matters, without the noise.

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates

Hackers Abuse Google Sheets to Hijack Crypto Wallet Addresses in ClickFix Attacks

Hackers are using Google Sheets as an unlikely control channel in a cryptocurrency theft campaign. The operation turns

Windows Remote Desktop Client Vulnerability Allows Attackers to Execute Remote Code

Microsoft has released security updates for CVE-2026-69485, an Important-rated remote code execution vulnerability affecting the Windows Remote Desktop

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products. The post ICS Patch

Ivanti Patches Critical Flaws Across Enterprise Security Products

Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to

New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser

Attackers are using trusted Microsoft services and blob URLs to generate stealthy phishing pages that leave defenders with

Chrome 153 Patches Seventh Zero-Day of 2026

The Chrome update includes 230 security fixes, and users are advised to update their browsers as soon as

Over 36,000 exposed Plex servers vulnerable to recent flaws

Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks.

Why won’t AI agents just follow the rules?

Are 200 million LG TVs listening in – even when switched off?

Claude Fable Solves a Historical Cipher

Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs