https://rootnotes.in/article/bitget-388-million-the-security-appliance-was-the-way-in Root Notes en 2026-10-01T11:02:31.502Z Bitget lost about 388 million dollars, and the way in was the security product https://rootnotes.in/article/anssi-dgfip-report-the-tax-agency-learned-of-the-theft-from-the-thief Root Notes en 2026-10-01T10:36:33.357Z France's tax agency learned of the theft from the thief, seven weeks after it started https://rootnotes.in/article/malicious-custom-gpts-clickfix-rat-hosted-on-chatgpt-com Root Notes en 2026-10-01T09:29:09.268Z The malicious GPT sat on chatgpt.com, the ad was bought on Google, and the victim pasted the command themselves https://rootnotes.in/article/openai-cancelled-gpt-6-1-astra-release-and-published-none-of-the-numbers Root Notes en 2026-10-01T07:47:29.984Z OpenAI says it cancelled a finished model over its own safety tests, and published none of the numbers https://rootnotes.in/article/zimbra-cve-2026-73570-an-email-reaches-the-snmp-path-and-takes-the-auth-keys Root Notes en 2026-10-01T07:36:56.033Z The Zimbra flaw arrives as an email, and what it takes is the pair of keys that make passwords beside the point https://rootnotes.in/article/phantomsub-101-npm-packages-subscribe-the-developers-whatsapp-account Root Notes en 2026-10-01T05:36:31.549Z 101 npm packages stole nothing. They signed the developer's WhatsApp account up to a channel https://rootnotes.in/article/cisco-sd-wan-manager-cve-2026-76504-one-encoded-character-walks-past-the-login Root Notes en 2026-10-01T05:36:18.157Z One hex-encoded letter walks past Cisco SD-WAN Manager's login, and it is already being used https://rootnotes.in/article/spectre-v2-btr-the-cpu-forgets-the-code-and-remembers-where-it-jumped Root Notes en 2026-10-01T05:32:36.542Z The CPU forgets the code and remembers where it jumped. That is enough to read the root hash https://rootnotes.in/article/pixelleak-coding-agents-published-13000-internal-screenshots-to-public-repositories Root Notes en 2026-10-01T05:22:56.675Z The agent could not attach a screenshot to a pull request, so it published one. Then 13,000 of them https://rootnotes.in/article/zscaler-threatlabz-2026-attacks-up-275-percent-named-victims-down-3-percent Root Notes en 2026-10-01T05:21:06.354Z Zscaler counts 275% more ransomware and 3% fewer named victims. Those are two different things being counted https://rootnotes.in/article/netscaler-zero-days-the-web-shell-answers-a-request-for-a-missing-icon Root Notes en 2026-10-01T05:18:21.534Z The NetScaler web shell answers a request for a missing icon, and CISA says hunt before you patch