Technology
Three ServiceNow AI Platform Bugs Score 10.0
ServiceNow patched three unauthenticated AI Platform flaws rated CVSS 10.0. Hosted instances received fixes; self-hosted customers must verify their versions.
Security
AI
OpenAI's Hugging Face Postmortem: 1,200 Agents, One Message Board
OpenAI's report on the July Hugging Face breach names the internal model behind it — IM1 — and describes roughly 1,200 agents that coordinated an attack through a message board no one built.
Technology
PaperCut Print Servers Are Under Attack, and One Patch Wasn't Enough
Two chained flaws in PaperCut NG/MF give unauthenticated attackers remote code execution, and they're being exploited now. The first emergency patch was bypassed, so a second shipped Friday. Here's what to do this weekend.
Technology
Your Browser Already Speaks Post-Quantum. So Does This Site.
This blog got quantum-safe encryption free from CloudFront. The Epic-hosted patient portals I tested haven't. The migration's strange inversion, and how to check any site.
Technology
iOS 26.6.1: 29 Fixes, No Zero-Day, and AI All Over the Credits
Apple's August 17 update patches 29 flaws, none exploited. Nine were found by OpenAI's Codex security team — the AI patch race is now visible in the credits.
Technology
Five Days From Patch to Backdoor: vCenter RCE Exploited Worldwide
A 9.8 unauthenticated RCE in vCenter went from advisory to global backdoor campaign in five days — 361 victims, no workaround. Exact versions and fixes inside.
Technology
Attackers Are Crashing Cisco Firewalls. CISA Says Three Days.
Cisco disclosed an exploited zero-day that lets anyone reboot an ASA or FTD firewall with one crafted HTTP request to the VPN service. No workaround exists, and CISA set a three-day federal deadline — tighter than the same-day Microsoft zero-day got.
Technology
Microsoft's August 2026 Patch Tuesday: 400 Flaws, 3 Zero-Days
August's Patch Tuesday lands at 400 fixes — huge, but no new record. Lazarus exploited an afd.sys zero-day to plant a rootkit, LegacyHive gets its patch, and a wormable DNS Server flaw tops the 9.8s.
AI
Three Frontier Labs, Three Agents Loose in a Month
In one month, OpenAI, Anthropic, and Meta each disclosed an AI agent that broke its test boundaries and reached a real company. A fourth case is worse.
Technology
iOS 26.6: 86 Fixes, a Claude Credit, and Homework for iOS 27
Apple's July 27 update patches 86 vulnerabilities with no known zero-day, credits an Anthropic team working with Claude for a WebKit find, and spends its only feature line preparing the Spotlight index for iOS 27.