Daily brief — Saturday, 12 September 2026

Elsewhere

Friday Squid Blogging: Rotting Squid on a Beached California Boat
Schneier on Security

CISA Adds One Known Exploited Vulnerability to Catalog
CISA

CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA

My Talk at DEF CON
Schneier on Security

More JFrog Artifactory bugs under attack, and all 3 have patches
The Register

Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
The Hacker News

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
The Hacker News

Artifactory flaws chained in attacks deploying backdoor malware
BleepingComputer

GitLab Vulnerability Exploited One Day After Disclosure
SecurityWeek

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
The Hacker News

Your Critical Vulnerabilities Might Not Be Your Biggest Risk
The Hacker News

EU's Cyber Resilience Act starts the 24-hour vulnerability clock
The Register