Coverage map
Cybersecurity coverage by desk
Follow focused desks for vulnerability intelligence, cloud control planes, malware operations, policy, incident response, AI security, and software supply chain risk.
- Desks
- 9
- Articles
- 407
Labs & reverse engineering
Technical deep dives, reproducible tests, and tool evaluations.
- watchNemotron 3.5 Transcribe Posts 4.71% English WER in Open Weights, and Fits a 32 GB GPU Only in 4-Bit
- watchLFM3-1.7B vs Qwen3.5-9B: The 1.7B Model Wins on Tool Calls, Then Loses on Reasoning and Long Context
- stableOllama 0.40.11 to 0.40.13: An OpenAI-Compatible Speech Endpoint, d3 Decision Models, LFM3 and DFlash2
AI systems and model risk
Coverage of AI application security, model abuse, agentic systems, and data exposure.
- highEMBRACE: Embedded Browsers in Cursor, Copilot, Claude Desktop, Codex and VS Code Leak Files and Run Code
- highCognition Agent Server Before 0.13.0 Lets Anyone on the Network Run Shell Commands (CVE-2026-109437)
- elevatedllama.cpp CVE-2026-116816: A Crafted GGUF File Corrupts the Heap on Load, Fixed Since b10261
Vulnerability intelligence
Zero-days, proof-of-concept activity, exploit chains, and emergency patch windows.
- highCISA Adds Two More Ivanti Connect Secure Flaws to KEV as Links in the CVE-2026-104935 Exploitation Chain
- criticalCISA Adds Magento PolyShell Upload Flaw CVE-2026-48356 to KEV: Fixed Builds and How to Hunt for Webshells
- elevatedCISA Adds a Low-Severity VMware ESX Logging Flaw to KEV, a Gap That Lets Admin Actions Go Unrecorded
Law & disclosure
Regulation, breach reporting, insurance, and board accountability.
- elevatedDHS Orders DeepSeek, and Anything Built on It, Out of Federal Civilian IT
- watchNew York's RAISE Act: frontier AI developers register with DIGIT from November, duties start 1 January
- watchGSA's New AI Contract Clause: 7-Day Warning on Model Regressions and No Training on Agency Data
Software supply chain
Coverage of dependency compromise, build systems, package ecosystems, and vendor risk.
- criticalPoisoned LiteLLM 1.107.0 Stole Cloud, AI-Provider and SSH Credentials for About Two Hours
- highTensorlake npm Worm: Revoking the Stolen GitHub Token Can Trigger a Home-Directory Wipe, Socket Says
- highMemTensor's OpenClaw Plugin and MemoryOS Shipped the sckit Credential Worm
Data exposure and protection
Coverage of leaks, sensitive data handling, encryption, and database security.
- stableFree Home Design Software: The Trackers and Permissions Behind the Apps
- stableChoosing a magicplan alternative: room scanners differ on what they upload
- stableFree Floor Plan Software and Privacy: What 5 Apps Collect While You Draw
Cloud control plane
Identity abuse, CI/CD compromise, SaaS exposure, and misconfiguration patterns.
Open desk →Identity and access
Coverage of IAM, authentication, privilege abuse, and account takeover risk.
Open desk →Incident response
Mitigation guides, IOCs, playbooks, and postmortem coverage.
Open desk →