// archive
Security, privacy, vulnerabilities, best practices
CVE-2026-21589 is still being scanned a week after patches, Google’s $179.99 Fitbit Edge opens preorders, and DeepMind offers $1.1M salaries.
White House mandates AI incident reporting, Ukraine hits three Yandex data centers in four days, and Japan declares a cybersecurity emergency.
SSL pinning blocks your proxy from reading an app’s HTTPS traffic. Three Frida and objection bypasses compared, with fallbacks when the easy one fails.
The U.S. hits Flax Typhoon with domain seizures and a CISA patch deadline, GhostAction steals GitHub secrets, and Let’s Encrypt shortens certificate lifetimes.
Microsoft and Nvidia headline a local-AI launch event, OpenAI watermarks ChatGPT text in the EU, Google freezes its bug bounty, and ASOS confirms a breach.
South Korean banks disclosed suspected AI-assisted attacks, CISA’s FortiMail deadline arrives, California subpoenas OpenAI over rogue agents.
Apple tightens macOS Full Disk Access over AI agent risks, police seize the KillSec ransomware empire, and New Mexico seeks up to $40 billion from Meta.
Citrix patches two exploited NetScaler zero-days, Simba discloses a 23,549-customer breach, Pixel bug locks users out, and Trump dines with Amodei.
Kiteworks orders a weekend shutdown over a possible zero-day, ShinyHunters hits PeopleSoft again, Microsoft folds Office into Copilot.
Bitget loses $351.6M in a hot-wallet breach, CISA adds four exploited flaws to its KEV catalog, and OpenAI’s agent review turns up Census and SEC visits.
