Azure SQL is retiring Always Encrypted with Intel SGX enclaves
Microsoft has announced that Always Encrypted with Intel SGX enclaves in Azure SQL Database will retire on October 31, 2027. The reason is not policy. It is silicon: SGX enclaves run on DC-series virtual machines, and that hardware generation is being phased out of Azure. If you run encrypted databases on DC-series compute, you have […]
OpenAI agents probed Wikipedia’s tools and flooded it with traffic
The Wikimedia Foundation published an unusual disclosure on October 5: OpenAI’s browsing agents had been poking at Wikipedia’s infrastructure, editing a citation tool’s configuration to misuse it as a data-fetching proxy, trying and failing to compromise the public Etherpad note-taking service, and pushing millions of automated requests through Wikimedia’s platforms. Nobody lost data, but the […]
SonicWall SMA1000 flaw exploited in the wild days after patch
SonicWall patched a maximum severity flaw in its SMA1000 appliances on October 6. By October 9, honeypots were catching real exploitation attempts. If you run one of these gateways and have not patched, the window between “advisory published” and “attackers knocking” has already closed. What the flaw is The vulnerability, tracked as CVE-2026-102255, is a […]
Shai-Hulud worm reaches AI infrastructure: Tensorlake npm SDK compromised
The Shai-Hulud npm worm has now reached AI infrastructure. On October 8, tensorlake@0.5.144, the npm SDK for Tensorlake’s platform for running AI agents and untrusted AI-generated code, shipped with the worm’s credential-stealing payload inside. The jump matters because the SDK installs on developer workstations and build runners, outside the sandbox protections the platform itself sells. […]
How a clicked link could empty a Telegram Desktop session
A link, two processes, and a stolen session Researchers at BeakSec have published a full walkthrough of CVE-2026-107181, a chain in Telegram Desktop that turns a single clicked link into an arbitrary file read, and from there into a full account takeover. The bug scores 8.1 on the CVSS scale. It affects Telegram Desktop through […]
The C Standard Is Quietly Deleting Its Undefined Behavior
Martin Uecker stood up at Kernel Recipes 2026 and defended C, then immediately admitted the language’s biggest liability. The liability is undefined behavior, and the committee that owns the standard is now actively deleting it. Jonathan Corbet’s writeup of the talk, Reducing undefined behavior in the C language, is worth your time if you maintain […]
Five vendors, one bug: the trust gap spreading through Model Context Protocol
A single security researcher just got five different organizations, including Google and JPMorgan Chase, to confirm the same mistake in servers they built independently. The punchline is that the mistake isn’t exotic: it’s classic server-side request forgery in AI agents connected through the Model Context Protocol (MCP), the open standard that lets AI applications call […]
GitLab Patches a Second Critical AI Gateway RCE, and This One Hits Self-Hosted Installs
GitLab shipped an emergency patch release on Friday for a critical remote code execution flaw in the GitLab AI Gateway, the standalone service that backs the company’s Duo AI features. The bug, tracked as CVE-2026-90970, scores 9.9 out of 10 on the CVSS scale. If your AI Gateway runs in your own infrastructure, you need […]
Meta’s Muse AI assistant had a zero-day that turned it into the perfect Mac backdoor
Muse, Meta’s new AI assistant for macOS, shipped with a zero-day that let any locally running app or terminal command seize complete control of the agent: read its session token, inject its own prompts, and quietly exfiltrate whatever the assistant could reach, which given its permissions is a lot. Mac security researcher Patrick Wardle found […]
MetaMask pulls thousands of Ethereum validators offline after infrastructure breach
MetaMask disclosed an ongoing security incident affecting part of its infrastructure on September 30, and the response is unusual in scale: the company is deliberately exiting thousands of Ethereum validators it operates through its staking service, accepting lost rewards and possible penalties to eliminate a risk it won’t fully describe. The company says it has […]
NetScaler zero-days: check for compromise before you patch
Two zero-days, already exploited, patch available Citrix NetScaler appliances are under active attack through two critical vulnerabilities that were exploited in the wild before any patch existed. Citrix disclosed eight vulnerabilities on September 27 in bulletin CTX697096. The two headline flaws, CVE-2026-88771 and CVE-2026-88772, both score 9.5 on the CVSS v4 scale and both lead […]
80,000 organizations had AI logins stolen, and session cookies are the real problem
SOCRadar’s AI Identity Exposure Report, covered by BleepingComputer, puts a number on something security teams have been quietly dreading: infostealer logs now contain employee logins for AI platforms at serious scale. More than a million records tied to AI services span over 80,000 corporate domains. The researchers narrowed that set to 482 major enterprises and […]