https://rootnotes.in/article/azazel-gentlemen-mcp-as-a-command-channel-and-the-affiliate-who-kept-the-money Root Notes en 2026-10-08T12:01:52.358Z The ransomware affiliate ran his commands through an AI assistant's tool protocol, then scanned the internet for more of them https://rootnotes.in/article/denmark-cpr-register-8-8-million-looked-up-through-lawful-access Root Notes en 2026-10-08T11:59:31.911Z Nobody broke into Denmark's population register — a company allowed to search it looked up 8.8 million people https://rootnotes.in/article/poellm-canto-incognito-the-c2-address-is-four-words-in-a-poem Root Notes en 2026-10-08T08:36:20.743Z The command server's address is four words in a poem, and moving the botnet means editing the poem https://rootnotes.in/article/kibana-cve-2026-102406-one-tenant-could-claim-anothers-data-stream Root Notes en 2026-10-08T06:15:40.078Z Kibana let one tenant claim another's data stream, and removing the package does not give it back https://rootnotes.in/article/wolfssh-cve-2026-16516-the-host-key-check-passed-on-a-curve-the-attacker-picked Root Notes en 2026-10-08T06:08:21.786Z The host key check ran, and passed, on a curve the attacker chose for it https://rootnotes.in/article/atlassian-cve-2026-21589-two-hours-from-proof-of-concept-to-the-first-attempt Root Notes en 2026-10-08T05:58:47.074Z Two hours passed between the proof of concept going public and the first attempt landing in a honeypot https://rootnotes.in/article/malfex-npm-three-years-37000-downloads-and-three-packages-still-installable Root Notes en 2026-10-07T13:19:57.789Z Three years, 37,000 downloads for one package, and three of them are still installable https://rootnotes.in/article/anthropic-cyber-verification-tiers-fewer-refusals-and-who-checks-the-badge Root Notes en 2026-10-07T12:51:15.442Z Anthropic is giving verified defenders a model that refuses less, and the open question is who checks the badge https://rootnotes.in/article/wikimedia-rogue-openai-agents-the-data-was-already-free-the-proxy-was-not Root Notes en 2026-10-07T09:40:57.176Z Wikipedia's data is already free, so the agents went after the one thing that was not: a tool that would fetch URLs for them https://rootnotes.in/article/handlebars-cve-2026-106446-the-validator-checked-the-shapes-it-expected-and-emitted-the-rest Root Notes en 2026-10-07T06:21:41.779Z Handlebars checked the parts of the template it expected to see, and compiled everything else into JavaScript https://rootnotes.in/article/atlassian-cve-2026-21589-knowing-the-path-is-not-a-barrier-when-the-vendor-documents-it Root Notes en 2026-10-07T05:36:19.945Z Atlassian says an attacker has to know the exact filename, which for an off-the-shelf product everybody does https://rootnotes.in/article/chrome-155-247-security-fixes-and-what-the-credits-say-about-who-is-finding-bugs Root Notes en 2026-10-07T05:28:08.176Z Chrome shipped 247 security fixes in one release, and the credits show where that number is coming from https://rootnotes.in/article/zachxbt-lazarus-laundering-he-paid-the-five-percent-to-find-out-what-it-buys Root Notes en 2026-10-07T04:42:08.793Z He sent 349,700 dollars to a laundering service to find out how it worked, and the five percent fee is the finding https://rootnotes.in/article/cling-botnet-stun-c2-the-protocol-that-exists-to-tell-you-your-own-address Root Notes en 2026-10-07T04:41:59.758Z The botnet's command channel is the protocol that exists to tell a machine its own public address, and nobody can block it