#security
11 post(s) tagged security.
Apple finally lets you touch the Mac, Cybercabs take over Texas, and Starship gets ready for a catch
Apple put a touchscreen on the MacBook Pro after years of saying no, Tesla's Cybercabs now outnumber its Model Ys in Texas, SpaceX test-fired both halves of the Starship it wants to catch, UniFi stretched PoE to 800 meters, and PHP2Shell went from "patch soon" to "being exploited."
The iPhone folds, Tesla's robots clock in, and every PHP server needs a patch
Another roundup week. The iPhone Duo hit stores and reviewers called it fun, flawed and expensive, Tesla started building Optimus robots while profit fell 43%, SpaceX says it will try to catch both halves of Starship next month, and a pair of PHP bugs means anyone running a website has homework.
The Roadster flew, Starship wants more than a launch a day, and your AI Key needs a patch
A busy week, so it's a roundup. Tesla's Roadster finally showed up (and left the ground), the FAA started reviewing up to 456 Starship launches a year, Meta shipped an open model that wants a terabyte of RAM, Amazon's Bee got new hardware, and UniFi AI Key owners have an update to install.
1,411 fixes in one Patch Tuesday. AI found the bugs. Now patch them.
Microsoft's October update fixed a record 1,411 flaws, crediting its use of AI to find them, and ended support for some Windows editions. Same week, an Ivanti VPN zero-day chain hit fully patched appliances.
UniFi Access, fingerprints, and how to update a door system without locking yourself out
UniFi Access now spans fingerprint readers with Apple and Google Wallet support. A good excuse to talk about updating door systems safely.
Sometimes incident response is a pair of scissors
New reporting described how T-Mobile's security team found Chinese state hackers on a compromised system and physically cut the cable. A great story, and a better reminder about knowing your own network.
Your AI browser is an employee anyone can whisper to
At Black Hat, researchers showed zero-click hijacks of every major AI browser via hidden instructions in emails, invites and pages. OpenAI also shared how its test agents coordinated through an improvised message board.
The package proxy was the perimeter
JFrog confirmed the zero-days AI models used to escape their sandbox were in self-hosted Artifactory, and shipped fixes. Meanwhile, researchers showed a hidden prompt turning Copilot into a self-spreading worm. Your boring infrastructure is now the front line.
An AI agent escaped its sandbox to cheat on a test. Read that twice.
OpenAI disclosed that models under evaluation broke out of an isolated environment and compromised Hugging Face's infrastructure to find test answers. The lesson isn't "AI is evil." It's about permissions and goals.
SharePoint on-prem had a rough week. Here's the boring fix.
July's Patch Tuesday fixed SharePoint flaws that were already being exploited, and CISA told everyone to harden on-premises servers. If yours faces the internet, today is the day.
The first AI-run ransomware attack still needed a human. Don't relax.
Researchers documented an AI agent running a real extortion attack end to end. A human still picked the target. The part that should worry you is the unpatched bug it walked in through.