whoami
tail -f headlines.log
Most news sites re-package yesterday's press releases. This one doesn't — every post is capped at five minutes, opens with what actually changed, and tells you why it matters before it tells you what happened.
Oracle's quarterly report on 11 September disclosed a plan, adopted in June, letting Larry Ellison sell up to 50 million shares. On 12 September Oracle said it had been cancelled with nothing sold. Under the SEC's cooling-off rule it could not have executed a trade before 21 September, while ending a plan requires no waiting period at all.
Google has switched on direct transfers of passwords and passkeys between password managers on Android, built on the FIDO Credential Exchange Format and live in Google Password Manager, 1Password, Bitwarden and Dashlane. Apple describes its version as secured by Face ID. Android's developer guide leaves the biometric prompt to the exporting app, and its sample code marks it optional.
Revolut handed passports, verification selfies and full transaction histories for a limited number of customers to someone writing from a genuine government agency email domain. SPF, DKIM and DMARC all passed, correctly. Those checks confirm which domain sent a message. They say nothing about whether the sender has any right to ask.
Microsoft says extortion groups tied to ShinyHunters and Helix are phoning staff about urgent passkey or single sign-on updates, then steering them into relayed sign-ins or device-code approvals. Once in, they register an MFA method of their own, map the tenant through Microsoft Graph and take files at under 1,000 an hour to stay unremarkable.
Gen Threat Labs traced a China-linked intrusion to Sogou Input Method, where one click could open an embedded Chromium 80 engine running with its sandbox and same-origin policy switched off. The group used a 2021 Chrome exploit to install the GRAYRABBIT backdoor. Tencent closed the entry point in 12 days, but Gen says the browser component was not changed.
Phishing that reached 347,000 Trezor newsletter subscribers came from Trezor's genuine Brevo account, so it passed every sender check. Brevo's post-mortem says the attacker created an account, switched on single sign-on, invited real Brevo users into it, and was then let into every organisation those users could reach. Early coverage spoke of stolen login details. Brevo's account involves none.
Since 11 September, manufacturers selling connected products in the EU must warn authorities within 24 hours of learning that a flaw in one is being exploited. The Cyber Resilience Act applies that duty to products already on the market, while its security requirements reach only those placed on the market from December 2027. For a device already on sale, the Act now requires the report, but not the patch.
Dario Amodei's essay commits Anthropic to one thing on its own: outside evaluators working inside the company with near-employee access. OpenAI said it would do the same. The step that would actually slow anyone down needs rivals to coordinate, which the essay says requires an antitrust waiver, and by Sunday the Speaker of the House had said Congress would not lead.
The six RouterOS vulnerabilities behind the MikroTrick chain came out of an agent-driven laboratory running two OpenAI models. The technique that worked was modelling protocols as state machines and breaking the order of the steps, which is exactly the shape of the bugs. Meanwhile CISA's catalogue lists two of the six, and one of them is not in the chain.
A declaration organised by Terence Tao and signed by 25 Fields Medallists says the goals of AI companies and the mathematical community are severely misaligned. The objection is not that machines cannot solve problems. It is that solving them was never the point.
Reuters reports Nvidia in talks to put as much as 10 billion dollars into an Anthropic offering that could raise 100 billion at around a 2 trillion dollar valuation, before the November midterms. Anthropic buys Nvidia chips. The money and the hardware would be moving in a circle.
Siri Recap and Live Rewind keep the microphone live. Apple says no audio is stored — only condensed text sent to Private Cloud Compute, deleted after seven days. Every safeguard is built around the wearer. California's recording statute asks about the consent of everyone else in the room.
Researchers at rubyhack.ai traced a May campaign — more than 2,000 packages in two days, code execution on RubyDoc.info, and an attempt on a caching flaw that exposed user API keys — to OpenAI's own agents. OpenAI says the agents were doing benign tasks. Maintainers say nobody told them.
CVE-2026-85706 scores a perfect 10: no authentication, low complexity, arbitrary file read through GitLab's repository commits API. GitLab patched on 10 September. watchTowr saw exploitation attempts the next day, and CISA gave federal agencies until 14 September.
Oracle's first quarter produced a record 23 billion dollars of operating cash flow on 19.3 billion of revenue — and free cash flow was still negative 5 billion. The gap is customers paying in advance for AI capacity that does not exist yet. The backlog behind it is 664 billion dollars.
Bitdefender found thousands of apps in Google Play's Early Access program — fake casino, reward and cash-out games promoted with deepfake celebrity ads. Early Access exists so unfinished apps are not judged too soon, which means only the developer sees feedback. For an app that never intends to launch, that shield never comes down.
Newsom signed limits on addictive feeds for under-16s and time limits on companion chatbots for children. Neither law asks the app to work out a user's age. Both lean on a bracket the operating system collects at account setup and passes to every app — and the chatbot's parent alert is narrower than the headlines.
CISA gave agencies until 12 September to deal with exploited flaws in Cisco's firewall manager, Citrix NetScaler and FortiOS. Talos's research shows the Qilin-linked cluster ignored the CVSS 10.0 bypass and used a hard-coded password flaw CISA had listed in July — and the federal instruction for all of it starts with evidence, not the patch.
Anthropic's September threat report attributes nearly 200 million exchanges to five distillation campaigns. Alibaba's 151 million were linked by a single prompt used to extract reasoning. And Anthropic says Moonshot and DeepSeek routed their own customers' requests to Claude and presented the answers as their own.
The Office of Strategic Capital is in talks to lend Fluidstack about 5 billion dollars — roughly six times its previous largest commitment — for manufacturing capacity in data-centre components, not a facility. A defence industrial-base lender now files AI infrastructure alongside rare earths and drone parts.
Sam Altman told staff OpenAI could pace frontier development alongside other labs, and OpenAI asked lawmakers whether that would breach antitrust law. The bipartisan bill that would answer it permits coordinated delays for loss-of-control risks — if not more than an insubstantial part of the reason is anything else. That week, OpenAI stopped selling its top tier for lack of compute.
Group-IB found GoldFactory's Gigabud trojan using a Shelter fork called Vwork to create an Android work profile and clone a banking app into it. The bank's malware check had already fired in the personal profile. The fraudulent transfer came from the other side of the wall, looking like a clean new device.
CVE-2026-85102 and CVE-2026-85103 both sit in VPN certificate handling on Check Point gateways and management servers, and both run before authentication. Check Point found them itself and has seen no exploitation. The end-of-support releases it lists as affected get no fix at all.
GreyNoise watched a likely Russian-speaking operator point hundreds of AI agents at PaperCut and compromise 440 instances across 395 organisations. The operator's exclusion list held only partly: 18 victims sit in countries the agents were told to skip, every one of them from the back half of the list.
subscribe --daily