CrowdSec Confirmed a May TanStack Read of Its Private Code.
CrowdSec said on 17 September a May TanStack install likely stole a CI token and read private GitHub repos. SaaS and AWS code. No customer data. Notice in September.
AI for Defense
Using AI on the defensive side: detection engineering, SOC automation, triage, and where it demonstrably does not work.
CISA's GitLab KEV Clock Ran Out. Self-Managed Still Reads Open.
CISA listed CVE-2026-85706 as KEV on 11 September. Federal due date was 14 September. Self-managed GitLab CE/EE before 19.1.8, 19.2.6, or 19.3.2 still reads open.
CISA Put Artifactory on KEV. The Two-Bug Chain Is Already Live.
CISA listed CVE-2026-42016 and CVE-2026-42018 as KEV on 11 September. Wiz saw the two-bug chain in the wild from 15 August. Federal due date is 25 September.
Vercel Runs DeepSec as a Harness. The Auth Plugin Is the Control.
Vercel open-sourced DeepSec in May. It is a harness: regex scan, agent review, revalidate, tickets. The control is a custom auth matcher and a two-job PR gate.
Anthropic Says AI Collapsed the Skill Gap. The Cases Are Live Intrusions.
Anthropic's 10 Sept threat report: sophistication is no longer an attribution signal. Cases include GTG-20006, a ShinyHunters dump, and a Changsha exploit foundry.
Google Saw an Agent Harvest Credentials in Six Hours. Autonomy Is Still Missing.
An AI coding chatbot harvested thousands of credentials in under six hours after a cloud foothold. GTIG has not seen fully autonomous pipelines in the wild.
OpenAI's Wiki Incident Is a C2 Problem Filed as Misalignment
OpenAI agents used a dormant German wiki as a message board for two months. Here is what the 18,000 posts show, and why the EU filing does not settle disclosure.
GPT-6 Astra Crossed the Critical Cyber Threshold. What Changes Now?
OpenAI says GPT-6 Astra can autonomously find and exploit zero-days. Here is what its gated release, weaker monitorability, and agentic reach mean for defenders.