Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel (The Hacker News)
A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool - Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities (The Hacker News)
Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf Adversary Research Team said it observed attackers exploiting C - Friday Squid Blogging: Squid on a Stick at the New York State Fair (Schneier on Security)
Looks tasty . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. - Using a VM to Contain an AI Agent (Schneier on Security)
It won’t work : My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which the - FBI Probes Service Selling 153M+ Drivers Licenses (KrebsOnSecurity)
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are availabl
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →