Bleeping Computer

On the other hand, Astra received 34 such flags compared with 73 for Sol, and neither model produced a severity 4 flag.

Bleepingcomputer.com warns that while Astra may be safer overall, it is also harder to inspect, which could make it an even greater risk.

Like how can you deal with what you cannot detect? So it's interesting, I guess, there's been all this hype leading up to this because OpenAI had that whole thing where their model escaped containment and went out and attacked Hugging Face.

I covered that on the podcast before.

Came from the real address because somebody had broken into the company's email provider.

So list who was allowed to send mail as your domain and breach it.

Any of them lands in your customer's inboxes wearing your name.

If you only do one thing today, apply those Cisco Secure FMC hotfixes.

It doesn't count another two hundred and four fixes Microsoft put out earlier this month in Azure, Entra ID, Copilot Studio, and other cloud services.

Bleeping Computer reports the surge follows Microsoft's adoption of AI-powered vulnerability discovery systems to hunt for bugs across its products.

Of the nine hundred and sixty six, some one hundred and five bugs are rated as critical.

Of those hundred and five critical bugs, eighty-one allow for remote code execution.

But how do we, uh...

ShinyHunters told BleepingComputer...

By the way, BleepingComputer somehow has like a direct line to the threat actors, the ShinyHunters.

They're always reporting, uh, on first-hand knowledge from the threat actors.

A password reset flaw that let them compromise several accounts belonging to DMV employees and an FBAI agent.

The flaw affects cloud and on-premises deployments both.

There's no confirmation yet that this particular one is being exploited, but BleepingComputer notes why nobody is waiting to find out.

ScreenConnect's vulnerabilities have been targeted in the wild repeatedly by ransomware crews and by state-backed groups, including a North Korean operation in 2024.

N-able lands again too with an emergency hotfix, N-Central 2026.3 Hotfix 4 out September 5th, for a critical pre-authentication remote code execution flaw.