Here is your briefing for Wednesday, September 2, 2026. SonicWall says attackers are chaining two zero-days in its S.M.A. one thousand remote-access appliances, the six two ten, seven two ten, and eighty-two hundred V. The opener is C.V.E. twenty twenty-six eight three five four eight, a pre-auth server-side request forgery in the Work Place interface rated a perfect ten. The follow-up is C.V.E. twenty twenty-six eight three five four nine, post-auth command injection in the management console that turns admin into R.C.E. SonicWall's P.S.I.R.T. investigated a live case. Patch to twelve point four point three dash zero three five two six or twelve point five point zero dash zero two nine five two, and if you see anything weird, re-image, rotate passwords, and reset T.O.T.P. tokens. Edge V.P.N. boxes remain the soft door that keeps getting kicked. Krebs on Security found Nexus, a new Exploit-forum shop selling digital scans of more than one hundred fifty-three million U.S. and Canadian drivers licenses, plus I.D. cards, travel docs, and medical cards. Timestamps and infrared-ultraviolet pairs point at I.D.Scan dot net, a Louisiana identity-verification vendor used by Hertz, Target, FedEx, and cannabis dispensaries. Fresh records jumped by nearly four hundred thousand in a day. Licenses for senior U.S. officials showed up in the catalog. The F.B.I.'s New Orleans field office opened an inquiry, and after Krebs published, Nexus replaced its login with a goodbye note. I.D.Scan told customers it is investigating. You can rotate a password. You cannot rotate your face on a government I.D. that already left the building. watchTowr says attackers are already exploiting C.V.E. twenty twenty-six eight two three two nine in JFrog Artifactory, a critical auth bypass scored nine point eight. Under default config, instances without an extra join key get a phantom join key that forges administrator credentials. JFrog patched in seven point one six one point twenty on August twenty-eighth. By September first, honeypots were seeing admin-token minting and user enumeration. Vercel C.E.O. Guillermo Rauch called it an R.C.E. bomb because Artifactory hosts binaries, so admin means you can poison what every build trusts. Self-managed, internet-exposed Artifactory needs that patch yesterday, plus audit-log review and credential rotation. Your artifact store is not a quiet side service. It is the supply chain. Forescout's Vedere Labs steered Anthropic's Claude to port a working pre-auth R.C.E. from one WAGO P.L.C. to another, landing attacker A.R.M. shellcode on live hardware against C.V.E. twenty twenty-one three one eight eight six in the Nucleus F.T.P. server. The model had a terminal, Ghidra, and the target box. Final R.C.E. work burned about five hundred thirty-six dollars in A.P.I. spend over eight and a half hours. A later session that pushed toward a C.two implant wrote flash and bricked the controller. No vendor fix exists for several Nucleus-based WAGO models, so the advice is still block F.T.P. and segment. The scary part is not an unsupervised agent deciding to attack. It is an authorized agent taking the wrong action on physical plant where wrong means downtime, not a rollback. Wired reports OpenAI says its forthcoming model Astra is the company's first to cross the internal bar for critical cyber capabilities. A public version is coming soon, but the advanced cyber features launch only to select partners in the Daybreak Blue early-access program. That lands beside Forescout's P.L.C. port and a fresh wave of internet-facing appliance exploits. The labs keep raising the ceiling on what a steered model can do to real systems, while the edge of the network still runs last year's firmware. Capability without a matching patch culture is just a shorter path to the same breach. Zero-day V.P.N. chains, a hundred fifty-three million licenses for sale, a poisoned path into the artifact store, an A.I. that ports industrial exploits, and a frontier model labeled critical for cyber. The common thread is trust concentrated in a few boxes, vendors, and models, then treated like it cannot fail. That's your brief. Stay sharp, patch your systems, and we'll see you tomorrow.

Kindle: https://www.amazon.com/dp/B0HHMH88H9 
Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472

Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764

https://mattch

Support the show