Codex Found The Bug. Every Major Web Server Has It.
An AI fuzzer just embarrassed five web server teams with HTTP/2 Bomb. Here is what your cybersecurity playbook should do about it.
June 2026
Microsoft Just Native-Ported 100+ Linux Binaries To Every Windows Box
Microsoft Coreutils ships native Linux binaries to Windows, expanding the LOLBin surface. Here's how to update your cybersecurity detections before attackers do.
Your Best EDR Has A Minecraft-Sized Blind Spot
WeedHack, Kali365, and copyright-phish kits sidestep your cybersecurity stack by hitting unmanaged devices and tokens. Close the gap before they hit yours.
Two Billion Installs Undone By One Sloppy Build Flag
One build flag exposed two billion Microsoft Android installs. Here's the cybersecurity pipeline discipline that actually prevents the next one. Read on.
The SVG Attachment That Walks Past Your Email Filter
SVG phishing attachments are slipping past mail filters that trust the image extension. Here's the gap and how to close it before users click.
NIST’s Vulnerability Database Has 27,000 Unread Tickets
NIST's vulnerability database is 27,000 tickets behind. Here's how cybersecurity teams should patch when the catalog stops working. Read on.
Your Help Desk Speaks Fluent Prompt Injection
Meta's AI support bot reset passwords for hijacked Instagram accounts. Here's the cybersecurity playbook for AI in privileged workflows. Start here.
The Netlogon Bug That Outran Patch Tuesday
A critical Netlogon bug is under active attack while Microsoft fights three other fires. Here's the cybersecurity work your AD team owes itself this week.
AI Agents Got DNS Before They Got A Threat Model
AI agents got DNS-based discovery before anyone built a cybersecurity story around it. Here's what defenders should do before the breach reports start.
May 2026
NetSupport Is The Payload. The Loader Is Still Unnamed.
An unnamed loader is dropping NetSupport RAT in live networks. Here's why cybersecurity teams keep missing it, and what to do anyway.