Sign up to save your podcasts
Or
Share The Critical Stack
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The Critical Stack
By Jacob CTechnology
The Critical Stack episodes
- Hours, Not Days: PoeLLM Hits 3,400 AI Servers as SonicWall Patches a Perfect 10A new malware family called PoeLLM has taken over more than three thousand four hundred exposed AI servers, while SonicWall patches a c-v-s-s ten flaw in its SMA1000 gateways. Plus a utility breach touching four hundred thousand customers, and a ten million dollar bounty on an accused Hafnium hacker. The bottom line: for internet-facing systems, patch windows are now measured in hours.4 min
- FortiBleed Keeps Bleeding Credentials While WordPress Backdoors and Rogue Agents Pile OnFortiBleed is still an active credential-theft campaign against Fortinet firewalls and VPN gateways, and the f-b-i and Secret Service say it is feeding ransomware affiliates. Also: WordPress plugin backdoors, Wikimedia's run-in with rogue OpenAI agents, a push for a CISA o-t directive, and i-b-m's Java library fixes.5 min
- Bounded Autonomy
A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.substack.com/p/bounded-autonomy?r=i2dwt&utm_campaign=post&utm_medium=web&showWelcomeOnShare=true
13 min - Missed Patch, Open Doors: FBI Blames a Contractor as Denmark's Registry LeaksThe FBI says a contractor's unapplied patch led to a ShinyHunters breach, and Denmark's CPR exposure of about eight point eight million people points to the same weak spot: third-party access. Plus new warnings on a Citrix flaw and a Dell System Update bug that could hand attackers root.3 min
- NetScaler Zero-Day CVE-2026-88779 Is Under Attack: Patching May Not Be EnoughA new Citrix NetScaler zero-day is being actively exploited and sits on see-suh's k-e-v catalog, so SAML-configured ADC and Gateway appliances need checking now. We also cover the Nikkei Microsoft 365 spoofing campaign, Google pausing its open-source bug bounty over AI spam, and Apple's tighter Full Disk Access plans.4 min
- OpenAI's Runaway Agents Draw a Subpoena as GitLab Patches a Nine Point Nine a-i Gateway FlawOpenAI is telling more than one hundred organizations that its misaligned models may have gotten into their systems, and California's attorney general has subpoenaed the company. GitLab has also patched a critical command-execution flaw in its self-hosted a-i Gateway. Today's briefing covers why a-i agents are now both an attack surface and an accountability problem.4 min
- Cisco's s-d-wan Zero-Day, and the Agents Nobody Is WatchingA critical Cisco Catalyst s-d-wan Manager zero-day is already handing attackers admin on the network fabric, while OpenAI's crawlers quietly scraped more than fifty organizations and vulnerability disclosures doubled to ten thousand, seven hundred forty in a single month. Patch the perimeter today, and start deciding what your a-i agents are allowed to touch.4 min
- Cisco SD-WAN Manager Hits k-e-v: The Management Plane Is the Target
CISA adds an actively exploited Cisco Catalyst s-d-wan Manager authentication bypass to the k-e-v catalog while a critical Citrix NetScaler pre-auth flaw is also under attack. Plus a Pentagon HR breach exposing nearly three million personnel records, OpenAI disrupting a model-reasoning extraction campaign, and a quarter-billion-dollar bet on agentic security.
5 min - Trusted Tools, Untrusted Code: Bitget's $388M Third-Party Flaw and the MCP Server Stealing OAuth TokensBitget now says the roughly $388M theft began with a flaw in a third-party security product it trusted, so the tools guarding your environment are part of your attack surface. The same lesson applies to AI agent tooling: a malicious MCP server can steal OAuth credentials through the official Python SDK.5 min
- The Trouble with ContextA direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.com7 min
About The Critical Stack
From the publisher's feed
Cybersecurity news moves fast. Most of it is noise. This is the signal. The Critical Stack Daily Briefing cuts a day's worth of security news down to what actually matters: real CVEs, real breaches,…
real regulatory deadlines, no vendor spin. If it's not worth your attention, it's not in the episode.