Collaborate Disseminate
The Kali Linux team released version 2026.3 after overhauling the public build scripts it uses to produce every official image. The refreshed scripts share the same features, command-line arguments and, where possible, the same layout, so a pipeline wr… Continue reading Kali Linux 2026.3 ships kernel 7.1.5, brings wardriving to the TicWatch Pro 3
Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users are away. The safeguards include approval requirements, checks for sensitive infor… Continue reading Anthropic details what stops Claude Duet from going rogue
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Comp… Continue reading Witness: Open-source framework for verifying how your software was built
AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available thro… Continue reading Forgotten AI agents may still access sensitive company data
Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network duri… Continue reading Synthetic identities leave US lenders with $2.4 billion in fraud exposure
Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The plugin hands that document to fresh AI sessions that have never seen the desig… Continue reading Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version 1.3 is defined in RFC 9147. The b… Continue reading OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, lower-cost prof… Continue reading Google opens its cloud to rival OpenAI, promises business data won’t train models
Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions l… Continue reading AI is taking cybersecurity jobs at junior and experienced levels alike
Here’s a look at the most interesting products from the past week, featuring releases from AppGate, IDENTOS, Sweet Security, and ThreatModeler. Sweet Security adds one-click protection for vulnerable cloud workloads Sweet Security has announced the rel… Continue reading New infosec products of the week: October 23, 2026