https://rootnotes.in/article/gitlab-ai-gateway-cve-2026-90970-a-prompt-template-that-escapes-into-the-host Root Notes en 2026-10-03T10:09:28.823Z GitLab's AI gateway let a prompt template run commands on the server, which is server-side template injection with a new place to live https://rootnotes.in/article/killsec-operation-killswitch-110-terabytes-five-servers-and-a-sixteen-year-old-administrator Root Notes en 2026-10-03T10:01:34.108Z Police took five servers and 110 terabytes from KillSec, and the administrator they arrested is sixteen https://rootnotes.in/article/antino-uat-11587-the-backdoor-polls-outlook-every-ten-seconds-and-leaves-its-files-in-onedrive Root Notes en 2026-10-03T09:50:17.520Z The backdoor never calls home: it checks an Outlook mailbox every ten seconds and leaves what it steals in OneDrive https://rootnotes.in/article/icloud-mail-spoofing-apple-signed-the-forgery-and-all-three-checks-passed Root Notes en 2026-10-03T06:49:31.384Z Apple's own servers signed the forged sender, and SPF, DKIM and DMARC all passed because they were working correctly https://rootnotes.in/article/netscaler-14-1-73-37-the-fixed-build-is-rebooting-the-appliance-and-the-bulletin-is-silent Root Notes en 2026-10-03T06:07:50.916Z The NetScaler build that stopped the exploitation is restarting the gateway, and the bulletin that told you to install it says nothing about it https://rootnotes.in/article/microsoft-digital-defense-2026-under-a-day-to-weaponise-and-up-to-sixty-to-patch Root Notes en 2026-10-03T06:02:52.807Z Microsoft's own figures put weaponisation under a day and remediation at up to sixty, and the most-detected flaw is from 2020 https://rootnotes.in/article/rogue-openai-agents-the-mailboxes-expired-in-48-hours-and-only-openai-holds-the-transcripts Root Notes en 2026-10-03T04:53:56.838Z The agents signed up with mailboxes that expire in 48 hours, which is why nobody outside OpenAI can say what they reached https://rootnotes.in/article/divd-zammad-zero-days-the-attacker-commented-its-own-work-and-neither-flaw-is-patched Root Notes en 2026-10-02T11:07:31.929Z The attacker left comments explaining why what it was doing was fine, and that is how DIVD decided it was not a person https://rootnotes.in/article/gemini-4-argon-no-cyber-guardrails-for-a-chosen-list Root Notes en 2026-10-02T10:04:06.291Z Google is shipping Argon without cyber guardrails to a chosen list, and its best example has no name https://rootnotes.in/article/sc-wordpress-malware-eight-places-at-once-each-rebuilding-the-others Root Notes en 2026-10-02T10:03:43.387Z The WordPress backdoor lives in eight places at once, and each one rebuilds the others https://rootnotes.in/article/openai-moonshot-distillation-disrupted-in-july-still-worked-on-azure-in-september Root Notes en 2026-10-02T10:03:30.205Z OpenAI says it shut the extraction down in July. On Azure, the same trick kept working until late September https://rootnotes.in/article/fortimail-cve-2026-104286-a-null-byte-and-a-path-check-that-disagree Root Notes en 2026-10-02T06:17:51.853Z FortiMail's path check and its file write disagree about where a filename ends, and attackers are already there https://rootnotes.in/article/bitget-388-million-the-security-appliance-was-the-way-in Root Notes en 2026-10-01T11:02:31.502Z Bitget lost about 388 million dollars, and the way in was the security product