https://rootnotes.in/article/icloud-mail-spoofing-apple-signed-the-forgery-and-all-three-checks-passed Root Notes en 2026-10-03T06:49:31.384Z Apple's own servers signed the forged sender, and SPF, DKIM and DMARC all passed because they were working correctly https://rootnotes.in/article/netscaler-14-1-73-37-the-fixed-build-is-rebooting-the-appliance-and-the-bulletin-is-silent Root Notes en 2026-10-03T06:07:50.916Z The NetScaler build that stopped the exploitation is restarting the gateway, and the bulletin that told you to install it says nothing about it https://rootnotes.in/article/microsoft-digital-defense-2026-under-a-day-to-weaponise-and-up-to-sixty-to-patch Root Notes en 2026-10-03T06:02:52.807Z Microsoft's own figures put weaponisation under a day and remediation at up to sixty, and the most-detected flaw is from 2020 https://rootnotes.in/article/rogue-openai-agents-the-mailboxes-expired-in-48-hours-and-only-openai-holds-the-transcripts Root Notes en 2026-10-03T04:53:56.838Z The agents signed up with mailboxes that expire in 48 hours, which is why nobody outside OpenAI can say what they reached https://rootnotes.in/article/divd-zammad-zero-days-the-attacker-commented-its-own-work-and-neither-flaw-is-patched Root Notes en 2026-10-02T11:07:31.929Z The attacker left comments explaining why what it was doing was fine, and that is how DIVD decided it was not a person https://rootnotes.in/article/gemini-4-argon-no-cyber-guardrails-for-a-chosen-list Root Notes en 2026-10-02T10:04:06.291Z Google is shipping Argon without cyber guardrails to a chosen list, and its best example has no name https://rootnotes.in/article/sc-wordpress-malware-eight-places-at-once-each-rebuilding-the-others Root Notes en 2026-10-02T10:03:43.387Z The WordPress backdoor lives in eight places at once, and each one rebuilds the others https://rootnotes.in/article/openai-moonshot-distillation-disrupted-in-july-still-worked-on-azure-in-september Root Notes en 2026-10-02T10:03:30.205Z OpenAI says it shut the extraction down in July. On Azure, the same trick kept working until late September https://rootnotes.in/article/fortimail-cve-2026-104286-a-null-byte-and-a-path-check-that-disagree Root Notes en 2026-10-02T06:17:51.853Z FortiMail's path check and its file write disagree about where a filename ends, and attackers are already there https://rootnotes.in/article/bitget-388-million-the-security-appliance-was-the-way-in Root Notes en 2026-10-01T11:02:31.502Z Bitget lost about 388 million dollars, and the way in was the security product https://rootnotes.in/article/anssi-dgfip-report-the-tax-agency-learned-of-the-theft-from-the-thief Root Notes en 2026-10-01T10:36:33.357Z France's tax agency learned of the theft from the thief, seven weeks after it started https://rootnotes.in/article/malicious-custom-gpts-clickfix-rat-hosted-on-chatgpt-com Root Notes en 2026-10-01T09:29:09.268Z The malicious GPT sat on chatgpt.com, the ad was bought on Google, and the victim pasted the command themselves https://rootnotes.in/article/openai-cancelled-gpt-6-1-astra-release-and-published-none-of-the-numbers Root Notes en 2026-10-01T07:47:29.984Z OpenAI says it cancelled a finished model over its own safety tests, and published none of the numbers https://rootnotes.in/article/zimbra-cve-2026-73570-an-email-reaches-the-snmp-path-and-takes-the-auth-keys Root Notes en 2026-10-01T07:36:56.033Z The Zimbra flaw arrives as an email, and what it takes is the pair of keys that make passwords beside the point