Past issues

31 issues · weekly

Every weekly briefing since February 2026. No fluff, no advertorials, no recycled headlines.

The Patch Is No Longer the Fix, Sep 29 to Oct 5, 2026

"Fortinet advisory FG-IR-26-175, published October 1, confirms attackers are exploiting CVE-2026-104286 (CVSS 9.8). The flaw combines path traversal with improper null-byte handling to give unauthenticated attackers arbitrary file write on FortiMail, and it was exploited before disclosure. Fixed builds 7.4.9, 7.6.7 a…"

Past issues

The Patch Is No Longer the Fix, Sep 29 to Oct 5, 2026

Past issues

The Guardians Are Now the Easiest Way In

The Control Plane Is the Only Target Left

Trusted Identity Is the New Zero Day

Nobody Pays, So Everybody Publishes

Your Vendors Became the Attack Surface

Every Trust Anchor Became an Attack Surface

The Extortion Economy Stopped Encrypting Anything (Aug 4 to 17, 2026)

Identity Is the New Perimeter, and It Has No Patch

The Management Plane Became the Attack Surface

The Attacker Now Runs Without a Human

Offensive AI Left the Lab This Week

The Attacker No Longer Needs a Human

AI Is Now Both Attacker and Attack Surface

Washington Gates the Model, Attackers Take the Token

Attackers Stopped Breaking In and Started Logging In

Trust Itself Is the Attack Surface

Trust Is the Attack Surface Now

The Developer Endpoint Is the Domain Controller Now

Edge Appliances Are the 2026 Master Key

SaaS Extortion Eclipses Encryption

Ransomware Doesn't Need Malware Anymore

Apr 21–27, 2026

Apr 14–20, 2026

Issue 007

Mar 31–Apr 6, 2026

Issue 005

Mar 10–16, 2026

Mar 3–9, 2026

Issue 002

Issue 001

Get the next one in your inbox