1. The US Congressional Budget Office confirmed unauthorized ac…
The US Congressional Budget Office confirmed unauthorized access to its networks in a suspected foreign cyberattack potentially exposing emails with congressional offices.
Category: Newsletter
2. A significant data leak from Chinese cybersecurity firm Know…
A significant data leak from Chinese cybersecurity firm Knownsec exposed cyber weapon specifications, proprietary hacking tool source code, government collaboration details, and a list of 80 compromised overseas surveillance targets.
Category: Newsletter
3. A detailed demonstration shows how an ARM-based IoT device’s…
A detailed demonstration shows how an ARM-based IoT device’s Address Space Layout Randomization (ASLR) can be bypassed using Return-Oriented Programming (ROP), enabling unauthenticated remote code execution via memory manipulation.
Category: Newsletter
4. The article advocates for redesigning systems in which AI en…
The article advocates for redesigning systems in which AI enhances meaningful signals instead of obscuring them, improving overall user experience and information delivery.
Category: Newsletter
5. Qilin ransomware group exfiltrated 300GB of data from Corner…
Qilin ransomware group exfiltrated 300GB of data from Cornerstone Staffing Solutions, including 120,000 resumes, Social Security numbers, salary data, and financial records, with threats of sophisticated phishing campaigns.
Category: Newsletter
6. EchoGram exploits gaps in training data guardrails by inject…
EchoGram exploits gaps in training data guardrails by injecting nonsensical “flip tokens” that cause false positives and bypasses in GPT-5.1, Claude, and Gemini, posing a dual threat of alert fatigue and actual malicious prompt bypasses.
Category: Newsletter
7. The RondoDox botnet leverages a vulnerability in the XWiki S…
The RondoDox botnet leverages a vulnerability in the XWiki SolrSearch endpoint, sending base64-encoded Groovy payloads via HTTP GET requests to download and execute malware. Existing IOC blocklists remain effective against this threat.
Category: Newsletter
8. Kite declutters Gmail inboxes by automating responses and st…
Kite declutters Gmail inboxes by automating responses and streamlining workflows, boosting user productivity securely and efficiently.
Category: Newsletter
9. This article cautions against uncritical use of LLM-generate…
This article cautions against uncritical use of LLM-generated code without expert oversight, highlighting risks and failures caused by poor AI-generated software integration.
Category: Newsletter
10. The program explores antimatter propulsion as a potential te…
The program explores antimatter propulsion as a potential technology to enable human space travel across stars, addressing technical challenges and future milestones.
Category: Newsletter
11. Project Prometheus, focused on AI for manufacturing, acquire…
Project Prometheus, focused on AI for manufacturing, acquired General Agents whose “Ace” AI agent autonomously controls computers for complex tasks; the project has raised $6.2 billion and has over 100 employees.
Category: Newsletter
13. A breach at Mixpanel exposed metadata of OpenAI API users in…
A breach at Mixpanel exposed metadata of OpenAI API users including names, emails, location data, and user IDs. ChatGPT users were not affected. OpenAI dropped Mixpanel as a vendor and is conducting a broad vendor security audit.
Category: Newsletter
14. Google updated free access for Gemini 3 Pro, limiting free u…
Google updated free access for Gemini 3 Pro, limiting free users to basic access with frequently changing daily quotas, likely reduced due to increasing demand. NotebookLM also restricted free users’ access to certain features and imposed limits on Pro users.
Category: Newsletter
15. ChatGPT surpasses traditional search engines like Google by …
ChatGPT surpasses traditional search engines like Google by using an agent-based approach that synthesizes information from multiple sources, eroding the traditional advantage of search engine indexes. However, this approach struggles with long-tail queries and fresh content.
Category: Newsletter