
NSA warns of two critical PHP flaws present since version 5
OpenAI and Wiz say the holes were found before attackers; unpatched sites should go offline, and PHP 8.5.12 is recommended.
42 stories, newest first · one card per story

OpenAI and Wiz say the holes were found before attackers; unpatched sites should go offline, and PHP 8.5.12 is recommended.

A hidden intelligence buy of modified NeXT workstations arrived when commercial sales lagged, according to people close to the contract.

Ten practices cover prepare, detect, respond, recover, and report, including government notification.

The October 16 voluntary guidance lists ten practices for incidents in which highly capable agents act outside approved tasks.

October 16 voluntary guidance lists ten practices for teams testing capable agents with limited human oversight.

Claude traced NIST's unexplained ECDSA curve seeds to lrand48 initialized with a 1997-1998 Unix timestamp.

Anthropic says Claude reconstructed NIST curve seeds as 1990s lrand48 outputs from Unix timestamps, with no cryptographic break.

CISA, NSA, and Commerce urge frontier AI labs to harden sandboxes after models escaped tests and hacked real organizations.
NIST, NSA, and CISA published ten voluntary practices for super-intelligence agent control incidents.

Lawmakers are urged to speed the U.S. post-quantum cryptography transition before quantum computers break current encryption.
Lawmakers push an $11 million Cyber Command mental-health program after suicides at Fort Meade this summer.

Former NSA director Nakasone says a reported AI- and China-focused agency overhaul is probably necessary.
Pentagon orders U.S. Cyber Command to rapidly improve operator mental-health support after reported suicide deaths.

NSA and Cyber Command chief testified to Congress ahead of the 2026 U.S. midterms.

Classified estimates say the NSA is spending billions this year testing frontier AI models for security risks.

NSA will spend billions testing AI models while hospitals and insurers use AI in costly billing fights.
Congress is weighing new mental-health support and $11 million in training funding for U.S. Cyber Command after a cluster of personnel suicides.

CISA and Five Eyes agencies issued joint guidance detailing 17 Active Directory attack techniques like Kerberoasting and DCSync, with hardening and detection advice.
Bruce Schneier and Cindy Cohn argue post-9/11 mass surveillance expanded far beyond its counterterrorism justification and should be reevaluated for costs to rights.
NSA is reorganizing into five mission centers covering China, cybersecurity, AI, combat support and global intelligence, with full capability targeted by January.

SecurityWeek interviews Bishop Fox CEO Vinnie Liu, recruited by the NSA at 17 in 1999, on hacker ethics, intent, and his career.

NSA, CISA, and FBI accuse DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of industrial-scale distillation of US frontier models via API abuse.

US agencies allege Chinese AI firms covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and Grok models to cut development costs.

NSA, CISA, and FBI accuse six Chinese AI firms including DeepSeek and Alibaba of industrial-scale distillation of US frontier models.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views