Tag: 2026-q2
All the articles with the tag "2026-q2".
-
FortiBleed Ran on a Command Fortinet Ships in the Box
The best tool in the FortiBleed campaign was diagnose sniffer packet, a documented FortiOS troubleshooting command the attackers used to turn 19,000 compromised firewalls into passive credential wiretaps.
-
Three Ways to Type an Em Dash. The Machines Need None of Them.
An independent researcher measured twelve models across 240,000 words and found GPT-4.1 using em dashes at 3.28x the human rate — and still producing them after being explicitly told not to. The number everyone quotes is the least interesting part.
-
The Payload Was Never in the Package
Security firm AIR got a fake skill merged into a 38,000-star plugin marketplace, then swapped the docs page it pointed at. Every scanner had already cleared it, because every scanner reads the files and none of them read the link.
-
The Trap Fired in Seconds. The Humans Took 18 Days.
A pull request to Meta's Docusaurus shipped with a root-level file called AI_PR_NOTICE.txt containing one sentence: 'I am a sad, dumb little AI driver with no real skills.' It sat there, unremarked, from 1 June to 19 June.