Blog

What Two Breaches Have in Common With a Bad Post The Pentagon announced in late September that someone had been inside the Defense Manpower Data Center since October 2025. Nobody caught it until July 2026. That is nine months of unauthorized access to personnel records on 2.76 million living people and 294,000 deceased, sitting undetected inside a system built specifically to track who works for the Department of Defense.

Memory Executives Just Moved the Goalposts Are you planning to build or upgrade a local LLM rig in the next year? You might want to price it out now instead of waiting. On October 1, 2026, Micron CEO Sanjay Mehrotra told investors that memory supply-demand will be much tighter in 2027 and 2028 than it is right now.

A Mailbox Breach Worth Noticing Are you convinced that self-hosting your own AI model is automatically the cheaper, safer bet? Microsoft published details on September 30 about active exploitation of a Zimbra flaw, CVE-2026-73570, and the timeline is the part worth sitting with. Zimbra patched the bug on July 20.

A Quiet Signal From Cloudflare Cloudflare just started issuing quantum-safe TLS certificates. Not because a quantum computer cracked encryption last week, not because a client demanded it, but because someday, years from now, a machine powerful enough to break current encryption standards might exist, and by the time it does, Cloudflare wants the infrastructure already in place. That is the whole story.

Skip the Comeback Post Are you sitting on a month of silence and dreading the first post back? Wondering if you owe your audience some kind of explanation before you're allowed to show up again? You don't.

The Scareware Ad Nobody Clicked Yesterday Your uncle's Mac made a sound it has never made before. A search bar sound, a "why is this page telling me I have five viruses" sound. He typed something simple into Google, something like "mac running slow," and somewhere between the search box and the actual answer he needed, an ad or an AI-generated summary told him his computer was infected.

The Ad That Froze the Screen Your uncle clicked a Google ad. Now his Mac browser is frozen on a full-screen warning claiming his machine is infected, with a phone number to call and a countdown clock ticking down like something is about to explode. Nothing is infected.

The Scareware Playbook Your uncle calls. His Mac is frozen. A siren is blaring through the speakers, and a full-screen alert says his device is infected with 14 viruses and his bank information has already been compromised.

The Scam Alert That Never Loads A relative of mine clicked a Google ad last month looking for antivirus software. What loaded instead was a full-screen page mimicking a Windows security alert, complete with a fake scan bar and a countdown timer telling her to call a number immediately. No download.

The Frozen Screen Problem Picture the scene. Your uncle clicks a Google ad, and suddenly his screen locks up with a full-bleed warning that his Mac is infected, complete with a fake support number and a countdown timer designed to make him panic. Netskope tracked this exact scareware campaign hitting 619 organizations between August 31 and September 14, running through both Mac and Windows machines, and Ars Technica broke down the mechanics on September 25.