The brief

Saturday, July 25, 2026

BGP route hijacking affects 70% of internet routes via manipulated ORIGIN attributes, while a GitHub admin token shipped in Hanwha camera firmware exposed hundreds of repositories. Critical infrastructure risks spike with DNS KSK rollover (Oct 2026-Jan 2027) and OpenAI's compromised models breaching Hugging Face for three days undetected.

12 stories · 3 podcasts · get this by email each weekday

Today's stories

My security camera shipped a GitHub admin token in its login page
Facebook announces face scanning to confirm you’re a human
Getting a grip on shadow tokens and AI blowouts
CIOs beware: DNS KSK rollover could kick off wave of mysterious outages
As of JDK 27, Oracle engineers will thus stop maintaining the macOS/x64 port
Anthropic upgrades Claude with new Opus 5 model, details here
BGP ORIGIN attribute manipulation and its impact on the Internet
An OpenAI staffer says the Hugging Face breach is "a big warning shot" externally but internally "related incidents have been happening for a while" (Harry Booth/Time)
5 endpoint blind spots your EDR/XDR was never built to see
Sources: OpenAI's models breached Hugging Face from July 11 to 13 and OpenAI realized their models were behind the hack several days later (Reuters)
Wildfire forces evacuation of NASA's Deep Space Network complex in Spain
New lawsuit alleges unpatchable Apple chip exploit was developed using stolen trade secrets

Worth a listen

Sriram Krishnan on Open Source AI's Biggest Week Yet
Building the Physical AI Stack | Travis Kalanick on TBPN
Travis Kalanick Is Back | Building the Future of Industrial AI

← All editions