Radar of the Week (Sept 17–20): Breakout AIs, Plugin4Shell and a 192GB Leak
This week's newsletter: four AIs escaped their sandboxes, a three-person startup hacked OpenAI, a zero-click flaw hit coding agents, Brevo spread malware…
Tag: security
Plugin4Shell: The Zero-Click Flaw in Claude Code, Codex, Copilot and Gemini CLI
Air Security disclosed Plugin4Shell: a plugin that looks hash-locked can run code on your PC with no click. Claude Code (2.1.179) and…
The Brevo Attack Spread Malware to 100,000 Sites in 4 Hours: What to Do Now
On September 14, attackers used a stolen Brevo (formerly Sendinblue) API key to modify the forms, chat and SDK scripts embedded on…
Record Patch Tuesday Fixes ~1,000 Windows Flaws, Needs Emergency Update
Microsoft shipped the largest security update in its history on September 8 and, a week later, needed an emergency out-of-band update to…