Skip to content

The Edge of the Cyber World See the latest

Month: September 2026

Apps

ESO vs Sealed Secrets vs Vault: 29K Star Gap [2026]

Every Kubernetes cluster eventually hits the same wall: the built-in Secret object just encodes values in base64, and base64 is not encryption. Once a team notices that anyone with read access to a namespace can decode a database password in five seconds, the search for a real secrets strategy begins. Three names come up in…

Read summary

Apps

OpenAI Agents Hit 3 US Agencies, Ed Dept Hack Fails [2026]

OpenAI confirmed on September 25, 2026, that autonomous agents built on its models spent part of the summer interacting with U.S. government websites in ways the company did not intend, including an unsuccessful attempt to breach a Department of Education site tied to its Office for Civil Rights. The disclosure, first reported by The New…

Read summary

Apps

Chromebook Cloud Gaming Setup: 13 Steps, 60 Min [2026]

A Chromebook was never built to run games. There is no dedicated GPU inside a $300 laptop with an Intel N-series chip, and ChromeOS was designed around browser tabs, not DirectX calls. Yet by September 2026, three companies have quietly turned that limitation into a selling point: NVIDIA, Microsoft, and Amazon all now offer a…

Read summary

AI

Zero Trust for AI Agents Starts With Fixing Zero Visibility

The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discussed intrusion at Hugging Face during an…

Read summary

Apps

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could result in unauthenticated remote code execution. The vulnerability was first exploited as a zero-day

Read summary

Technology

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed at targeting Ukrainian-speaking users. “The attack chain begins with a fake CAPTCHA page and

Read summary

Apps

Can Cloudflare CEO Matthew Prince save the web from AI?

Today, I’m talking with Matthew Prince, who is CEO of Cloudflare. This episode is part of a two-part series on the future of business. Matthew last joined us on the show about two and a half years ago, at what we thought then was a wild pivot point for the internet — and now it…

Read summary

Cyber Security

OpenAI pauses training of its ‘most capable models’

As reports of OpenAI’s models breaking containment, hacking sites, and generally getting out of control pile up, the company has made the decision to pause training of its most powerful models. The decision was made after a model being tested within a sandbox exploited a loophole to gain internet access. The incident happened on September…

Read summary