Vulnerabilities & Exploits The Zimbra Bug That Turned a Monitoring Add-on into a Command Line Microsoft published a September 30, 2026 deep-dive on CVE-2026-73570 — an unauthenticated command injection in Zimbra's optional SNMP notification path — with exploitation observed between t
AI Security Stolen AI API Keys Are Now the Attack Currency Anthropic's September 2026 threat report documents a criminal AI supply chain built on stolen API keys and session tokens. One hacktivist campaign ran for a month entirely on stolen keys; th
AI Security Perplexity Red-Teamed Its Agent Sandbox: The VM Held, the Network Didn't Perplexity's Secure Intelligence Institute published a red-team report on its own SPACE sandbox: zero VM-to-host escapes in 108 runs, but four models bypassed the network egress policy, and
Vulnerabilities & Exploits The Controller That Runs Your AI Data Center Had Hard-Coded Credentials NVIDIA's September 22 bulletin disclosed a CVSS 9.8 hard-coded-credential flaw in NICo, the Kubernetes-based controller that provisions bare-metal AI infrastructure. The tool that manages ev
Kubernetes & Containers Google Routes Inference on KV-Cache Pressure: The Multi-Cluster GKE Gateway, Measured "Google benchmarked the multi-cluster GKE Inference Gateway at 17,000 nodes: near-linear throughput, under 1% routing overhead, spillover driven by KV-cache pressure instead of round-robin l
Linux & Open Source AlmaLinux Hands the Certification Test Kit to Its Users — and Publishes the Results AlmaLinux's software certification puts the test kit in users' hands and the results in a public catalogue. Netics examines what the shift means for trusting Linux compatibility claims.
AI Agents DeepSeek Just Published the Blueprint for Training Agents at Scale DeepSeek's DSec report shows what agent training actually needs from infrastructure: an elastic sandbox factory with tiered isolation, on-demand image delivery, and RL co-design.
LLMs & Models The Browser Becomes an AI Distribution Point: What Mozilla and Mistral Actually Changed Mistral Small 4 is now inside Firefox Smart Window, with France first for official French-language support. The real story is distribution — and whether user choice survives the integration.
Security Operations ISOC Is Microsoft's Answer to Agent-Speed Attacks. The Loop Still Needs Human Judgment Microsoft merges SIEM and threat protection into one integrated SOC loop. Storm-3168 shows why the convergence is necessary — and why least privilege inside the loop decides if it works.
Databases Valkey 9.1 Turns the Redis Licensing Shock Into a Real Upgrade Path Memorystore for Valkey 9.1 went GA on September 25 with up to 3x QPS at microsecond latency. The upgrade path runs through the 2024 Redis license shock.
Vulnerabilities & Exploits Oracle PeopleSoft Exploitation: How One Encoded Character Bypassed a WAF Rule A URL-encoded P let UNC6240 evade literal-path WAF rules at Oracle PeopleSoft. Netics examines the patch-first response to renewed CVE-2026-35273 exploitation.
Sovereignty & Compliance Europe's Sovereignty Package Draws a Line Most Clouds Will Not Cross The Commission's Technological Sovereignty Package — Chips Act 2.0 and the Cloud and AI Development Act — grades cloud services on a four-level sovereignty scale. Defence-pushback shows the
AI Security Microsoft's Network DLP Now Watches AI Agent Uploads. Roll It Out in Audit Mode Purview network DLP on Entra Global Secure Access blocks sensitive data at the network layer — including traffic an AI agent sends on a user's behalf. The licensing and limits deserve scruti
Software Supply Chain AI Coding Agents Now Ship Software. Plugin4Shell Shows Nobody Checks the Package A zero-click plugin swap bypasses SHA pinning in four major AI coding agents. The fix has to ship in the agent itself, and updating is only the complete remedy where one exists.
Security Operations AWS Frontier Agents Earn Autonomy by Keeping an Approval Gate AWS Security Agent and DevOps Agent are now generally available. The autonomy is real — the approval gate is what makes it shippable. Netics on where the boundary should sit.
AI Agents The OpenAI Agents API Makes the Harness a Managed Product OpenAI's Agents API turns the Codex harness into a managed service with hosted sandboxes. Netics on why the interesting boundary is the sandbox, not the model.
AI Agents Salesforce on Google Cloud: The Agent Stack Gets a Shared Foundation Salesforce and Google Cloud are unifying infrastructure and agents: Hyperforce on Google Cloud, Gemini Enterprise with Salesforce data via MCP, and Zero Copy data sharing. Netics on what is
Serverless & Edge Worker Previews Give Every Change a Place to Prove Itself Cloudflare Worker Previews give each Git branch its own production-like environment — URL, state, and observability included. Netics on why this is the missing evidence loop for agent-writte
AI Compute & Chips NVIDIA Topograph Treats GPU Placement as a Live Topology Problem NVIDIA's open-source Topograph discovers cluster topology from cloud APIs or on-prem fabrics and publishes it as Kubernetes labels, Slurm config, or Slinky ConfigMaps. Netics on why topology
LLMs & Models GPT-6 Prompt Caching Makes Latency and Cost an Engineering Choice OpenAI's GPT-6 prompt caching brings dashboards, diagnostics, breakpoints, and prewarming. Netics on why caching is an economic layer agents must be architected around, not a vendor convenie
Strategy & Market The AI Labs' Public Pacing Calls Are Now Antitrust Evidence Four subscribers filed a class action against Anthropic, OpenAI, SpaceXAI and Google over the September 12 pacing coordination. Netics reads the complaint: what it gets right, what it conced
Kubernetes & Containers Kubernetes v1.37 Hardens the Volume You Already Mount Kubernetes v1.37 adds emptyDir permission modes and bind mount options — the first native way to put noexec, nosuid and nodev on any volume. Netics on why the highest-value security gap in K
AI Compute & Chips Benchmarking LLM Inference Needs a Real Load Client NVIDIA's AIPerf replaces GenAI-Perf with a multiprocess load client that stops being the bottleneck. Netics on why LLM inference numbers are only worth as much as the client generating them.
Vulnerabilities & Exploits A CVSS-10 Path Traversal in GitLab's Commits API Is Being Exploited GitLab patched a maximum-severity unauthenticated file-read flaw in the repository commits API and CISA added it to the KEV catalog. Netics on why CVSS 10.0 in a self-managed DevSecOps tool
Cryptography & Post-Quantum Java 27 Turns On Post-Quantum TLS by Default JDK 27 ships hybrid key exchange for TLS 1.3 with X25519MLKEM768 first in the default list. Netics on why a default-on post-quantum handshake in the most widely deployed runtime is a bigger
