The Practice Range Was a Live Network
A Gemini eval mix-up put a cybersecurity test on live company networks. Cage the next agent before it walks off the range.
September 2026
You Filed Screenshots as Harmless
Gyazo's dump proves screenshot hosts are a cybersecurity data store. RatHat is reading the rest. Audit your capture path.
Four Linux Kernel Flaws Now Ship With Public Root Exploits
Public Linux kernel root exploits just reset your patch clock. Shrink local-to-root cybersecurity risk on the hosts you already log into.
QUERY Is Standard. Your Method Allowlist Isn’t
RFC 10008 made QUERY a real HTTP method. Most cybersecurity stacks still parse like it's 2010. Check your verb allowlists.
CISA Cut Weekly Vuln Roundups. FBI Boarded Two Tankers
CISA killed weekly vuln roundups as FBI boarded two tankers. Score real cybersecurity exposure, then cut it. See what to change this week.
Your Failover Died With the Region
AWS wrote off Bahrain and UAE data after the strikes. If your cybersecurity plan assumed the region would return, check the copies.
A Judge Now Owns the People-Search Empire
Radaris lost its domains in court. The dossiers didn't. See what your cybersecurity team should freeze this week.
Unauthenticated File Upload Put PHP Shells on 6,000 Shops
Unauthenticated WooCommerce uploads dropped PHP shells on 6,000 shops. Your cybersecurity plugin inventory is the real control. Audit it today.
One Confirmed Leak. 7.5 Million Records.
CenterPoint confirmed a 7.5 million-record leak after the dump. Snapshot audits fail as cybersecurity proof. Check your export path today.
Teachers Forced Microsoft’s Classroom Privacy Deal
Teachers got Microsoft to lock school AI. Your tenant still trains on tickets. Read the cybersecurity cuts to make now.