FortiBleed Can Lock Out Businesses, Plus 3 Stories
FortiBleed is still using stolen credentials to lock organizations out of Fortinet gateways. Plus voter-data privacy, Cleo AI refunds, and an AI-drafted lawsuit.
Mike York
About Mike York
Posts by Michael York:
Veeam Backup Servers Need Patching, Plus 3 Stories
A critical Veeam backup vulnerability lets a low-privilege Viewer run code on the backup server. Plus Flock surveillance pressure, an FBI cyber disruption, and iPhone price pressure.
Open Source SEO and Social Media Tools: Own the Boring Parts
Open source SEO and social media tools can reduce lock-in and support steady growth, but only if you budget for maintenance, security, and change.
Windows Gives AI Agents a Sandbox, Plus 3 Stories
Microsoft Execution Containers give Windows AI agents enforceable limits around files, networks, credentials, and system capabilities. Plus political AI calls, a critical Splunk flaw, and satellite phone service.
Church Cyberattacks Expose Member Data, Plus 3 Stories
South Korean churches investigate breaches exposing member and donation data. Plus a critical Atlassian flaw, FICO layoffs, and Google’s new nuclear-power deal.
A Missed Patch Exposed FBI Staff, Plus 3 Stories
A missed PeopleSoft patch exposed sensitive FBI personnel data. Plus Google’s Spirit data bid, another exploited NetScaler flaw, and 400 AI-linked bank job cuts.
Your Car Is Talking to Big Tech, Plus 3 Stories
Connected cars and apps are sharing identifiers and location data with major tech companies. Plus exploited Zammad flaws, charging roads, and AI bug-report spam.
AI’s Infrastructure Bill Is Coming Due
AI’s infrastructure buildout is measured in trillions, but useful work still has to pay the bill. Plus exploited FortiMail and Cisco flaws, a €95 million AI voice scam, 543,699 live GitHub credentials, a landmark AI copyright ruling, and a promising push to speed dementia diagnosis.
Can AI Pay for Its Infrastructure? Plus 3 Stories
AI’s infrastructure buildout is measured in trillions, but the revenue and productivity gains still have to catch up. Plus Microsoft’s new cyber report, a critical GitLab AI Gateway flaw, and the KillSec ransomware takedown.
Longtail Forge Update: The Compiler Is Finally Quiet. Good. Now What?
Longtail Forge reached zero strict TypeScript diagnostics, simplified its verification system, and closed a major cleanup branch without pretending every target was met.
Apple Tightens Mac Data Access, Plus 4 Stories
Apple is tightening macOS Full Disk Access as AI agents raise the stakes. Plus a school-vendor breach, fake Zoom malware, Amazon’s data-center promises, and a hijacked Microsoft account.
California Curbs Web-Tracking Suits, Plus 3 Stories
California narrows one heavily litigated web-tracking theory under CIPA. Plus an exploited FortiMail zero-day, 543,699 live GitHub credentials, and Amazon’s camera-equipped delivery glasses.
FTC Opens AI-Agent Probe, Plus 3 Tech Stories
The FTC is investigating AI-agent risks as researchers report failed government-site probes. Plus an exploited Cisco flaw, rent algorithms, and smart-glasses privacy.
Your Monitoring Needs Monitoring Too
Infrastructure monitoring is supposed to tell you when systems fail. But the monitors have dependencies, assumptions, and failure modes of their own.
AI Is Helping Price Your Big Mac, Plus 3 Stories
McDonald’s is using AI-assisted pricing to recommend local menu prices. Plus a landmark AI copyright ruling, bank AI scrutiny, and an actively targeted Orkes Conductor flaw.
Apple Patches an Exploited iPhone Flaw, Plus 3 Stories
Apple patched an actively exploited CoreGraphics flaw affecting older iOS, iPadOS, and macOS branches. Plus data-center power shortcuts, Google’s EU privacy fight, and Anthropic’s unusually stark IPO risk disclosure.