RECTIFIER

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure (thehackernews.com)

Tuesday links: the electric revolution (abnormalreturns.com)

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems (thehackernews.com)

Pixel 11 MTE Disabled? ARM Memory Tagging Extension, Android Memory Safety, and Why This Matters (thecybersecguru.com)

PHP 8.6 release date and features (benjamincrozat.com)

“Unidentified Database”: 5 Million Emails Just Leaked – and It’s Why X Accounts Are Under Attack Today (thecybersecguru.com)

X Users Are Getting Hit With Unsolicited Password Reset Requests – Here’s How to Protect Your Account (thecybersecguru.com)

Pair of Modern Primitive Paintings found this week kept unknown for now (dulltooldimbulb.blogspot.com)

Proton Mail Down Again: Proton Confirms Residual Hardware Failures After Last Week’s Frankfurt Data Center Overheating (thecybersecguru.com)

AI Is Taking Over Physics and Nobody Talks About It (backreaction.blogspot.com)

ReKindle (manualdousuario.net)

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds (thehackernews.com)

Cash in on the AI Boom by Renting Out Your Spare Compute (spectrum.ieee.org)

2000 Great Songs #1440: The Big Bright Green Pleasure Machine (www.jitterywhiteguymusic.com)

Theurgist (idiotking.org)

Research links: stock-specific volatility (abnormalreturns.com)

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests (thehackernews.com)

What’s inside Isabella’s bag? (manualdousuario.net)

SPMO: One Momentum Stock Fund to Rule Them All (economistwritingeveryday.com)

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones (thehackernews.com)

Python 3.15 RC1 Is Out — Here Are the 3 Features That Will Change How You Write Code (systemweakness.com)

Broken Access Control: A Practical Walkthrough of 13 PortSwigger Labs (systemweakness.com)

A 12-Step Process for IIoT (Industrial Internet of Things) Forensics (Kebande, IT Professional… (systemweakness.com)

Prompt Injection in 2027: Why AI Systems Still Can’t Reliably Trust Instructions (systemweakness.com)

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 (thehackernews.com)

Manifest V2 is Officially Dead: Inside Google’s Chrome Web Store Purge and the Future of Ad Blockers (thecybersecguru.com)

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis (thehackernews.com)

Tantalizer 125: Latin and Greek (enigmaticcode.wordpress.com)

The good ol’ days of building Java (stackoverflow.blog)

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity (thehackernews.com)

Dropbox Breach, Explained: How a Lenovo ID Verification Flaw Turned Federated Login Into a Master Key for Account Takeover (thecybersecguru.com)

The Official Launch of Pulp Finction (thefinanser.com)

Things worth reading: 1st September 2026 (thefinanser.com)

ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st) (isc.sans.edu)

The External Field Effect In MOND (dispatchesfromturtleisland.blogspot.com)

Quick Human Evolution Hits (dispatchesfromturtleisland.blogspot.com)

Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st) (isc.sans.edu)

Blaugust Wrap-Up (82mhz.net)

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st) (isc.sans.edu)

The New Debug Bar for Laravel (benjamincrozat.com)

Stale GitHub Token Let ChainDrop Worm Poison Keyv, Cacheable (www.cyberkendra.com)

Monday links: the cost of money (abnormalreturns.com)

PrettyPrague Zero-Day Exploit Hits Avast Antivirus (www.cyberkendra.com)

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales (thehackernews.com)

I didn’t set a cookie (manualdousuario.net)

Virtualizor Compromised via BGP Hijack, Hosts Hit Hard (www.cyberkendra.com)

Microsoft Outage: Microsoft 365, Outlook, Teams, Azure and Microsoft Store Hit by Service Disruptions (thecybersecguru.com)

Linux Finally Gets Thunderbolt on Apple Silicon: A Technical Deep Dive into the ACIO Reverse Engineering Breakthrough (thecybersecguru.com)

Why Speed, Not Volume Decides Your Exposure Window (www.cyberkendra.com)

The one change that worked: I banned myself from social media — and my children have never been happier (manualdousuario.net)

Learn Scapy Packet Crafting: Build, Send and Analyze Network Packets (thecybersecguru.com)

Money Money Money (idiotking.org)

Adviser links: the custody shift (abnormalreturns.com)

EU Digital Services Act 2026: ChatGPT, Reddit, and Roblox Designated as VLOSE and VLOPs Under Strict New Oversight (thecybersecguru.com)

The E.U.’s AI Drive Undermines Its Own Chip Strategy (spectrum.ieee.org)

Academic administration (economistwritingeveryday.com)

2000 Great Songs #1439: Miss Lonelyhearts (www.jitterywhiteguymusic.com)

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More (thehackernews.com)

AD Security Series — Phase 1: LLMNR/NBT-NS Poisoning from Linux: How a Misconfigured Protocol Hands… (systemweakness.com)

CryptoLyzer vs testssl.sh vs SSLyze: A Practical Comparison (systemweakness.com)

Subfinder Looks Simple. Your Recon Workflow Probably Isn’t. (systemweakness.com)

The Attack Wasn’t Hidden. We Were Looking at the Wrong Evidence. (systemweakness.com)

I Built a SOC Home Lab on an 8GB M2 Mac. The Constraint Changed How I Built Everything. (systemweakness.com)

Why I Stopped Pretending My Threat-News Bot Was a Stack Monitor (systemweakness.com)

A “quantum bath” puts quantum entanglement on autopilot (www.sciencedaily.com)

Investigating a Murder: Public Records Uncover New Clues in Chinatown Cold Case (www.bellingcat.com)

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions (thehackernews.com)

The First Battery Was Inspired By a Dead Frog (spectrum.ieee.org)

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets (thehackernews.com)

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance (thehackernews.com)

In Which Senator Sharon Makes Some Poor Romantic Decisions (strangeco.blogspot.com)

The Bear’s Lair: Canada – the living standards lemming (www.tbwns.com)

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs (thehackernews.com)

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims (thehackernews.com)

Dad‘s custom Atari peripherals (goto10retro.com) (www.goto10retro.com)

Nigeria: 5,000 Fiber Cuts First Half of 2026 (subseacables.blogspot.com)

The trouble with technical debt (thefinanser.com)

Things worth reading: 31st August 2026 (thefinanser.com)

ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st) (isc.sans.edu)

Matrox: Graphics for Professionals (abortretry.fail) (www.abortretry.fail)

My new old Micro Hi-Fi (82mhz.net)

Cores in space: The core memory module from a 1980 Spacelab computer (righto.com) (www.righto.com)