社会保障、电子法院和电子健康系统的登录绕过漏洞
一项严重安全漏洞（CVE-2026-9058）被曝光，影响波兰社会保障局（ZUS）、电子法院和电子健康系统的身份验证机制。攻击者可绕过登录验证，直接访问敏感数据和系统功能。研究显示这些公共数字服务仅一步之遥就可能陷入网络混乱，暴露了电子签名系统实施中的关键缺陷。
相关报道
Patrick McKenzie notes that an LLM-produced blog post analyzing supply chain attack clusters, published by msuiche, is the first AI-generated public artifact he finds professionally relevant and complete enough that the lack of a human author does not materially compromise its utility.
A user reports receiving an Amber Alert from the California Highway Patrol containing a bit.ly link that redirected to a spammy 3gp file converter site, not legitimate information. Despite the suspicious link, the alert was real and matched a listing on missingkids.com. The issue was likely a copy-paste error, as a corrected alert was sent 39 minutes later.
The Bhutanese government, through its Computer Incident Response Team (BtCIRT), has joined Have I Been Pwned's free government service as the 45th government onboarded. BtCIRT now monitors Bhutanese government domains against the data in HIBP.
exe.dev is a cloud service designed for the agent era, offering pools of VMs with SSH, root access, and web authentication by default. It injects secrets at the network edge to keep them out of LLM hands, and supports persistent servers, internal tools, vibe coding, and disposable devboxes.