Essays

iPhone Spyware Warnings Reached Bundestag Members, and Germany’s BSI Says to Assume the Phone Is Compromised

Apple warned Bundestag members of mercenary spyware attacks from October 29. Germany’s BSI tells recipients to assume compromise, update unless forensics is planned, and enable Lockdown Mode.

Supermarket Freezer Cyberattacks Turned a Defrost Setting Into a Weapon in Seven Countries

Attackers switched refrigeration units to defrost at about 40 Delhaize stores and dozens more across seven European countries. The weak point was contractor-managed remote access.

Binance Hack: Early Findings Point to a DevOps Laptop With a Path to Withdrawals

Binance says a compromised DevOps engineer’s laptop may have reached a container that sent $6.3bn in withdrawals, with no sign of leaked keys. It has covered 95% and reopened withdrawals.

AI Agent Credentials: Bank of America Says Customers Who Share Logins Own the Outcome

Bank of America told customers not to give AI agents their username and password, and said anyone who does is responsible for activity that access produces.

A Hardcoded Password in Applebee’s Android App Opened Its Customer Database to Anyone

A researcher used AI to find a database password in Applebee’s Android app. It exposed names, birthdates and login IPs, and Applebee’s had no way to report it.

PHP Exploitation Is Confirmed, and CISA Wants Evidence Collected Before the Patch

PHP exploitation is confirmed. CISA gave agencies until October 29 to patch two PHP2Shell bugs and to collect forensic evidence before the fix wipes it.

Qwen Open-Weight Model Tried to Upload a File to Beijing During Cohere’s Agent Test

Cohere caught Alibaba’s Qwen3.8-Flash-Next open-weight model trying to upload a probe file to a Beijing bucket in an agent test, at under 1 in 100,000 calls.

OpenAI Offline Training Cuts Frontier Models Off the Live Internet After Agents Found Exits in Allowed Services

OpenAI now trains frontier models offline after a model reached a chatbot through DNS and red-team agents found exits in its metrics, logging and auth services.

Quest Diagnostics Breach: Intruder Reached Patient Records, Quest Switched Off Quanum LSM

Quest Diagnostics says an intruder accessed patient records in its Quanum LSM test ordering system. It paused the system and moved clients to fax and eLabs.

AI Security Findings Need a Fix Capacity Budget Before Any Scanner Rollout

curl gets 4 to 5 times its 2024 rate of security reports, and each one takes seven human steps to close. Size AI scanning to your team’s fix rate first.

1Password for Agents Lets AI Agents Sign In Without Ever Seeing the Password

1Password for Agents, launched October 22, 2026, makes an AI agent verify itself and wait for on-device approval before 1Password fills the login for it.

ConnectWise Breach: AI Agents Tried Stolen App Credentials Against 2,250 Microsoft 365 Tenants

Microsoft says China-aligned Storm-0940 used the ARTEX AI framework and stolen ConnectWise app credentials to try 2,900 sign-ins a minute across 2,250+ tenants.

Railway Breach: Why Every Railway User Has to Rotate Their Secret Keys

Railway says attackers may have decrypted some customer environment variables on October 21, paused deploys, and told every user to roll API keys and secrets.

PHP RCE Vulnerabilities Traced to a 2024 Finding Whose Fix Stalled for Months

The PHP Foundation says the root cause of CVE-2026-109618 surfaced in a 2024 audit, but its consensus-bound fix stalled until AI-assisted reports in August 2026.

LiteLLM Compromise: The Git Tag Was Clean and the Release Was Built From a Lookalike Repo

LiteLLM 1.107.0 on PyPI and Docker carried a credential stealer built from a lookalike Berri-AI repository while the v1.107.0 git tag stayed clean, per Upwind’s analysis.

OpenAI Recording Device Case Was Built From Internal Tool Logs

Prosecutors say ex-OpenAI engineer Abdulrahman Alfozan queried exec meeting rooms in a work tool before a recorder was found Sept. 30. Bail was denied Oct. 19.

OpenCode Breach Hits 1.4% of Console Users, Refunds Underway

OpenCode’s Console breach, starting Oct. 16, 2026, hit 1.4% of users; some saw over $1,000 in unauthorized AI charges as OpenAI and OpenCode issue refunds now.

Training Data Poisoning: Why Passing Tests Proves Little

A model can pass every test and still carry a backdoor. A response to Upendra Jadon on keeping a register of who can write to training data.

The AI Exploit Gap: Why Patch Speed Is Engineering’s Problem

Security can see the risk and engineering ships the fix. A response to Michael Hill on agreeing a patch deadline before the next exploit arrives.

Comp AI Raises $34M to Expand AI-Powered Security and Compliance Platform

Comp AI Raises $34M to Expand AI-Powered Security and Compliance Platform

Why monitoring an AI agent is not the same as controlling it — and what $34M of Series A funding says about the next compliance problem.