Can Your Firewall Follow a Polygon C2?
ChainScript's Polygon C2 and ClickFix lures make perimeter cybersecurity look current while the callback moves. See what to hunt this week.
September 2026
They Open-Sourced the Kernel Driver Hunt
DeepZero just automated hunting exploitable Windows drivers. See what that means for your cybersecurity stack, and lock down loads this week.
Space Force Signed. You Still Own Friday Night
A stealth cybersecurity vendor just landed Space Force and DARPA paper. Your pager still owns the glue box. Audit exposure before the demo.
One Unrevoked GitHub Login Copied 170 Private Repos
CrowdSec lost 170 private repos to leftover GitHub access. Use this cybersecurity offboarding checklist before your source walks.
A Help Ticket Reached OpenAI’s Source Tree
OpenAI's help forum fed a staff-account chain. Your cybersecurity program still files community bugs as low. Check your SSO seams.
The Practice Range Was a Live Network
A Gemini eval mix-up put a cybersecurity test on live company networks. Cage the next agent before it walks off the range.
You Filed Screenshots as Harmless
Gyazo's dump proves screenshot hosts are a cybersecurity data store. RatHat is reading the rest. Audit your capture path.
Four Linux Kernel Flaws Now Ship With Public Root Exploits
Public Linux kernel root exploits just reset your patch clock. Shrink local-to-root cybersecurity risk on the hosts you already log into.
Private GitHub Is a Loud Command Channel
Private GitHub is live C2, and the AI-escape story is cover. See what this week's cybersecurity failures mean for your repos.
QUERY Is Standard. Your Method Allowlist Isn’t
RFC 10008 made QUERY a real HTTP method. Most cybersecurity stacks still parse like it's 2010. Check your verb allowlists.