Srsly Risky Biz: “Rogue” AI Isn’t Going Anywhere
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh...
Month: September 2026
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
In the agentic era, the stakes are higher: AI agents now act with real access to your identities, your data,...
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Microsoft Threat Intelligence identified and tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in the Zimbra Collaboration Suite...
I Want Better Reporting on AI Genie Behavior
AI systems are regularly completing tasks in ways that their prompters don’t want or intend. Some of them are disturbing,...
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in...
How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank
Aref Jaber is on a neighbor's roof, trying to get home. At 51, he is clambering over a wall into...
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia
This newsletter is brought to you by PortSwigger. You can subscribe to an audio version of this newsletter as a...
TerminalFix and Lorem Ipsum Loader enable covert tunneling
In August 2026, Sophos analysts began investigating a series of Managed Detection and Response (MDR) cases that involved ClickFix-style lures...
Phishing Abuses RMM Tools for Persistent Access
In July 2026, Microsoft Defender Experts observed phishing campaigns targeting organizations across multiple industries that distributed a masqueraded MSP360 Remote...
OpenAI Gets Sued Over the Hugging Face Hack
A legal nonprofit sued OpenAI in a California court on Tuesday over the company’s agents escaping a testing environment and...