ESPN works with ad partners based in Russia, China and the UAE. You'll never know unless you look. DecryptAds just made looking trivial. https://krebsonsecurity.com/2026/08/whos-tracking-you-use-this-new-service-to-find-out/

SCCM sits in your infrastructure like a master key. One HTTP POST from literally anyone in your domain and an attacker owns the whole thing. Patch CVE-2026-47301 now. ... https://api.cyfluencer.com/s/potential-for-remote-code-execution-in-microsoft-sccm-via-newly-discovered-exploit-chain-28995

Meta's filing a patent for glasses that recognise your dinner guests, clip their best moments, and auto-generate highlight reels. Nothing says "we've thoug... https://www.404media.co/meta-patents-ai-glasses-to-use-facial-recognition-to-identify-people-make-highlight-reels-of-your-dinner-party/

Farmers planted crops under solar panels expecting failure. They got three times the yield, used 65% less water, and cooled the panels in the process. The land just needed permission to do two things at once. https://energiesmedia.com/solar-panels-farmland-crops-agrivoltaics/

Breach of Confidence: 07 August 2026 I've spent the week explaining to people that stateless protocols are not a commentary on government, and I'm not sure I've convinced anyone. One Protocol To Rule Them All MCP 2.0 has gone stateless. One request instead of two, no handshake, no server keeping…

Breach of Confidence: 07 August 2026

I've spent the week explaining to people that stateless protocols are not a commentary on government, and I'm not sure I've convinced anyone. One Protocol To Rule Them All MCP 2.0 has gone stateless. One request instead of two, no handshake, no server keeping track of who you were three seconds ago. It scales because it doesn't have to remember anything, and smaller models can actually drive it without falling over.

javvadmalik.com

A $30 children's smartwatch. Three massive supply chains. Zero authentication. Tens of millions of devices where someone else can silently photograph your kid, hear their conversations, and track their every ... https://www.wired.com/story/hackers-stalked-me-by-hijacking-a-smartwatch-for-kids/

Memory makers have already sold 2027's entire annual output. Buyers are keeping quiet because admitting they're scrambling looks worse than saying nothing at all. https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?CnlID=1&id=0000763847_DVY7YHX65GMLYZ6UQEEMP

Zbtlink denies their routers have backdoors while simultaneously taking down firmware to fix unspecified security vulnerabi... https://www.theregister.com/security/2026/08/06/chinese-router-vendor-denies-its-firmware-contains-backdoors-but-pauses-downloads-to-fix-security-issues-anyway/5283794

Not to be outdone by OpenAI, Meta's model apparently decided that "testing" meant testing on real targets. The race to the bottom now has an agentic division. https://www.reuters.com/technology/metas-ai-model-hacked-another-company-during-testing-information-reports-2026-08-05/

Auditors caught fraudsters in 1938 using Benford's Law. Turns out the same statistical quirk that catches made-up numbers also catches ... https://kennethbspringer.au/2026/08/05/benfords-law-detecting-ai-generated-images-without-ai/?utm_source=mastodon&utm_medium=social&utm_campaign=article-16

A state news agency spent over a decade documenting how its own leadership turned journalism into a filing system for political order... https://telex.hu/english/2026/08/04/nearly-500-page-document-compiled-by-hungary-s-state-news-service-staff-details-how-news-was-manipulated-during-orban-era

They've turned your calendar into a postbox. Commands arrive as events scheduled for the year 2099, stolen data leaves as encrypted attachments, all riding through Microsoft Graph... https://cybersec.picussecurity.com/s/hollowgraph-backdoor-turns-microsoft-365-calendars-into-a-c2-channel-28829

Dinosaurs ruled for 165 million years. Mayflies live a day. Stop confusing "legacy" with "outdated" and "new" with "better. https://blog.knowbe4.com/what-security-can-learn-from-dinosaurs

Everyone's arguing about who owns AI agent security. They're all wrong. The answer is nobody, which is precisely why it matters. https://api.cyfluencer.com/s/understanding-the-ai-agent-security-ecosystem-roles-responsibilities-and-where-runtime-authority-fits-28828

Stateless beats stateful. MCP 2.0 ditches the session handshake—one request instead of two, no server-side state to track, scales like it actually means it. Less complexity for everyone. Smaller models can drive it. https://simonwillison.net/2026/Jul/31/stateless-mcp/

The Robots Have Escaped, Please Buy Our Product It feels a bit like watching the latest epic blockbuster in the iMax. OpenAI and Anthropic announce that their models have escaped from secure testing environments, reached the internet and attacked real systems. We are expected to nod as the…

The Robots Have Escaped, Please Buy Our Product

It feels a bit like watching the latest epic blockbuster in the iMax. OpenAI and Anthropic announce that their models have escaped from secure testing environments, reached the internet and attacked real systems. We are expected to nod as the companies describe “unprecedented cyber capabilities” and models going to “extreme lengths”. It sounds like a warning, but it also sounds like a product launch.

javvadmalik.com

Thirty-seven thousand internet-exposed server management interfaces. A vulnerability from 2013 that still works. Most passwords cracked in minutes. Your data center's fron... https://api.cyfluencer.com/s/how-we-hacked-thousands-of-data-centers-in-minutes-using-a-20-year-old-vulnerability-28758

A password that takes 14 years to crack via brute force is useless to protect you if it's already in a breach database and attackers are using it in credential stuffing attacks. https://api.cyfluencer.com/s/new-research-does-argon2-mean-your-password-is-uncrackable-28757

An AI worm that rewrites itself through your own Copilot sessions, bypassing every security layer you installed. Microsoft deployed band-aids in March. We're all jus... https://www.csoonline.com/article/4203630/microsoft-confirms-an-ai-worm-is-propagating-through-copilot-and-other-ms-apps.html

Breach of Confidence — 31 July 2026 I've been thinking about the number of security products that promise to solve problems nobody actually has. Then I remembered that most actual problems don't have vendors. The government just made up a new crime A bloke at the US border tried to use a duress…

Breach of Confidence — 31 July 2026

I've been thinking about the number of security products that promise to solve problems nobody actually has. Then I remembered that most actual problems don't have vendors. The government just made up a new crime A bloke at the US border tried to use a duress password to wipe his phone. Now he's being prosecuted for destroying his own device. Nobody passed a law saying this was illegal.

javvadmalik.com

Welcome to JFK, Please Lower Your Expectations JFK airport looks like it was designed by a steering committee of tired men who only took the job because it paid well and gave them a crew to discuss their golf scores with. The entire setup before you get through security is old and confusing.The…

Welcome to JFK, Please Lower Your Expectations

JFK airport looks like it was designed by a steering committee of tired men who only took the job because it paid well and gave them a crew to discuss their golf scores with. The entire setup before you get through security is old and confusing.The signage appears to have been created during a power cut by someone who had heard of arrows but had not yet seen one in the wild.

javvadmalik.com

Marketing agencies are drowning in passwords they shouldn't be sharing, losing track of who has access to what, and praying no one leaves a client's ad account open in Slack. A password manager isn't a luxury here. It'... https://api.cyfluencer.com/s/password-managers-for-marketing-firms-28704

Still Got My Nokia Somewhere Up There I still have my Nokia 3210 somewhere. Not in a drawer I can easily reach but boxed up in the garage with the party decorations and a broken food processor I've been meaning to fix since 2019. I know it's there because I packed it deliberately when we moved…

Still Got My Nokia Somewhere Up There

I still have my Nokia 3210 somewhere. Not in a drawer I can easily reach but boxed up in the garage with the party decorations and a broken food processor I've been meaning to fix since 2019. I know it's there because I packed it deliberately when we moved house, which means at some point I looked at a phone with a cracked screen, a battery that hasn't held charge since the Blair administration, and the faint ghost of a Snake high score, and thought: *I might need this.*

javvadmalik.com

Most people stop thinking the moment they grasp something. They confuse skimming for understanding. Actual thought requires boring, lonely concentration on one thing long enough to surprise yourself. Multitasking doesn't help. It makes you worse at thinking, wo... https://fs.blog/how-to-think/

Someone's built a microphone jammer using ultrasonic transducers and an RP2040. Works brilliantly. Now we wait for the inevitable arms race where phones develop better audio processing, then someone builds a better jammer, the... https://hackaday.com/2026/07/23/mic-jammer-relies-on-ultrasound/

A museum accidentally became a brand by embracing the worst review it ever got. Now it's sold 738 shirts in 30 hours. The lesson isn't about turning lemons into lemonade. It's about having the spine to... https://www.wbur.org/news/2026/07/27/new-bedford-whaling-museum-worst-aquarium-ever-merch

We've spent years celebrating passkeys as the thing that finally kills password attacks. Turns out the attacks just changed uniforms. https://www.darkreading.com/identity-access-management-security/flaws-passkeys-implementation-old-attacks-work

Publicly indexed AI conversations are awkward enough; Anthropic's response "you shouldn't have shared them then" is a masterclass in not reading the room. https://techcrunch.com/2026/07/27/psa-your-claude-shared-chats-and-artifacts-may-have-ended-up-on-google/

They found spyware that nobody had ever seen before. Then they realised they'd actually seen it years ago, just didn't know what they were looking at. https://medium.com/@billmarczak/an-angry-spark-or-a-triangle-in-disguise-ac32852a1be3

Industry walked into CISA town halls and basically said: count fewer of us, tell us to report less, give you less detail when we do. The most significant cyber law Congress ever passed is being negotiated down to som... https://cyberscoop.com/cisa-circia-cyber-incident-reporting-rule-feedback/