https://rootnotes.in/article/so-net-counted-the-leak-down-to-sixteen-bank-records-and-seven-letters Root Notes en 2026-10-31T11:00:59.670Z So-net counted its leak down to sixteen bank records and seven letters https://rootnotes.in/article/gmo-will-never-pay-and-is-offering-a-million-dollars-for-information-instead Root Notes en 2026-10-31T10:54:51.602Z GMO says it will never pay, and is offering a million dollars for information instead https://rootnotes.in/article/anthropics-filing-shows-an-80-billion-loss-the-operating-loss-was-693-million Root Notes en 2026-10-31T09:48:47.445Z Anthropic's filing shows an 80 billion dollar loss. The operating loss was 693 million https://rootnotes.in/article/authenticator-checked-the-app-you-claimed-to-be-not-who-was-asking Root Notes en 2026-10-31T09:40:06.212Z Authenticator checked the app you claimed to be. It never checked who was actually asking https://rootnotes.in/article/ivanti-patched-one-of-three-and-the-fix-was-vulnerable-to-the-other-two Root Notes en 2026-10-31T06:02:56.283Z Ivanti patched one of the three flaws being used together. The fix was vulnerable to the other two https://rootnotes.in/article/the-poisoned-update-existed-for-ten-minutes-then-the-file-went-back-to-normal Root Notes en 2026-10-31T06:02:31.152Z The poisoned update existed for ten minutes. Then the file went back to normal https://rootnotes.in/article/apples-new-flagship-macbook-pro-has-an-older-chip-than-the-cheaper-one Root Notes en 2026-10-30T08:40:11.342Z Apple's new flagship MacBook Pro runs an older generation of chip than the cheaper one announced the day before https://rootnotes.in/article/the-top-weakness-last-quarter-was-not-a-missing-patch-it-was-missing-logs Root Notes en 2026-10-30T08:39:58.109Z The leading security weakness last quarter was not a missing patch. It was that nobody could see what had happened https://rootnotes.in/article/nik-c2-the-victims-api-key-pays-for-the-attackers-model-calls Root Notes en 2026-10-30T07:08:21.992Z The new idea in this command-and-control framework is not that it calls a model. It is that the victim's API key pays for the calls https://rootnotes.in/article/keydrift-they-went-for-the-keys-that-encrypt-the-traffic Root Notes en 2026-10-30T06:48:34.577Z The malware on these SD-WAN controllers was not after files. It was after the keys that encrypt the traffic between branches https://rootnotes.in/article/the-catalogue-says-gitlab-the-bug-is-in-rubys-regex-engine Root Notes en 2026-10-30T06:13:46.688Z The catalogue says GitLab. The bug is in Ruby's regular expression engine, and Ruby has not issued a CVE for it https://rootnotes.in/article/mlflow-two-flaws-whose-titles-name-the-deployment-state Root Notes en 2026-10-29T12:02:03.010Z Two MLflow flaws landed the same day, and both advisory titles end with the words unauthenticated MLflow servers https://rootnotes.in/article/one-sd-wan-controller-three-entries-on-the-exploited-list-since-july Root Notes en 2026-10-29T12:01:47.524Z One SD-WAN controller has produced three entries on the exploited list since July, and each one got the shortest deadline the catalogue issues