Your ‘American’ AI Model May Still Have Chinese DNA
Cisco warns that model publishers and country labels can hide inherited weights, training data and upstream dependencies.
Security
Vulnerabilities, defensive security, architecture and operational security.
Veeam ONE Fixed a CVSS 10 RCE. Another Flaw Can Coerce SMB Authentication
Veeam ONE patches close a CVSS 10 unauthenticated RCE, arbitrary file read, SQL injection and a 9.3 flaw that can coerce SMB authentication.
Microsoft Calls KB5120998 “Non-Security.” It Still Changes Admin Privileges, Agent Isolation and Enterprise Automation.
Microsoft labels KB5120998 a non-security preview, but it changes administrator protection, AI process isolation, WMIC availability, post-quantum TLS and enterprise deployment behaviour.
Your Email Address Is a Tracking Cookie You Cannot Clear. Brave Wants to Replace It
Brave now generates unique forwarding addresses that reduce breach exposure and cross-site correlation through a reused primary email.
ATF Isolated the Breached System. It Still Contained Investigation Targets.
ATF says a standalone system breach did not reach its enterprise network or eForms, but the isolated environment contained information about investigation targets.
Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
Adobe Campaign Classic Has Three CVSS 10 Paths to Code Execution
Adobe fixed three unauthenticated, network-reachable Adobe Campaign Classic flaws rated CVSS 10.0. On-premises and hybrid customers must update to build 9401.
Android 17 Encrypts the Domain Name. Enterprise Network Visibility Just Changed.
Android 17 adds ECH, local-network permission enforcement, certificate transparency by default and carrier-controlled 2G disablement. Privacy improves, but enterprise visibility changes.
PaperCut After Patching
Patch the software. Investigate prior exposure.
ServiceNow Patched Three CVSS 10 Flaws. No Login Was Required.
ServiceNow patched three CVSS 10 flaws that can be exploited without credentials, plus a high-severity sandbox escape. Self-hosted customers must verify the complete build.