Published Soursen pieces tagged cybersecurity, with the standfirst, the beat and the day the piece went up. Every fact is checked against the source.
Security
A fake captcha got one employee to paste a command into their own terminal, and that opened the door to 2 Senate departments. The attack is a warning about a social engineering trick that is spreading. The bigger lesson is what Berlin did after it noticed.
Security
CVE-2026–98432 is a 10 year old Linux TCP flaw that an AI model turned into a remote root exploit. Volunteer led distributions shipped the fix fast. Canonical, which sells security subscriptions, finally responded on 3 November, with a patch that sits in a testing channel and needs manual steps to apply. The delay is one problem. The shape of the response is another.
Security
In October 2026 a major security firm posted 6 Linux kernel vulnerabilities, 2 of them rated 9.0, straight to the public mailing list with no fixes attached. The maintainers were furious. The real story is that responsible disclosure may be breaking down for open source, and AI is the reason.
Security
CVE-2026–98432 is a use after free flaw in the Linux kernel’s TCP code, rated 9.8 out of 10, that can hand a remote attacker root on a server running multipath TCP. What makes it different from the usual critical CVE is who found it. An unreleased internal AI model at Anthropic spotted the bug, then built a working root exploit in about 53 minutes. I went through what the flaw is, who is patched, and why the AI part changes the math for defenders.
Security
In October 2026, Mozilla and Google confirmed that 8 intermediate signing keys from eMudhra, 1 of the few Indian certificate authorities trusted globally, had private keys a laptop can guess in under a second, including 1 that was literally the integer 4. I went through how a secret that should be 116 digits long collapsed to single digits, how browsers shut it down in under 3 hours, why your backend servers may still be exposed, and why, for a certificate authority, the incident is survivable but the response decides everything.