THE INFORMATION OVERLOAD FILES
Who has the keys, who found the hole, and who gets the patch queue.
28 stories · Newest first · Stories may appear in more than one section
Police say an Anthropic model sent a fabricated homicide tip during automated testing. It stayed in spam. The reported discovery lag was 72 days.
Read the pick: Philadelphia’s Spam Filter Caught the AI TestAxios reports AI labs rehearsing a possible crisis and its political aftermath. Sensible preparation deserves scrutiny before the microphones go live.
Read the pick: The Emergency Has a Press PodiumAP reports that Gaza Children Village plans AI monitoring of classroom speech. Its start date, exact alert rules and notice to families remain unclear. A tested proposal is not a verified live installation.
Read the pick: The Classroom Has a Microphone ProposalReuters reports plans for about 270 departures at Flock Safety by the end of October. The company declined comment; the report does not establish that privacy opposition caused the cuts.
Read the pick: Flock Watches the Roads. Its Workforce Gets the Uncertainty.Free security scans for eligible open-source projects. Human attention remains a separate line item.
Read the pick: Anthropic’s Free Scanner: Please Bring Your Own TriageSeven domains seized. Two hacking tools disrupted. Viddy the rebuilding bill, droogies.
Read the pick: Washington Repoed the Hacker Tool ShedBritain and Germany have announced a counter-hybrid partnership. Information sharing and coordinated disruption are the promise; operational results remain unproven.
Read the pick: Britain and Germany Order a Hybrid-War Fire ExtinguisherArizona’s court system says attackers copied data on 1.3 million people, along with protection-order and foster-care records. A malicious-email click is the suspected entry point.
Read the pick: The Court Archive Became an Attacker’s InventoryMicrosoft wants autonomous agents working on your desktop. It also shipped an OS-enforced container to stop them wandering through the files. Progress has acquired a lock on the medicine cabinet.
Read the pick: The AI PC Finally Got a Childproof LockAnthropic says Haiku 5.5 costs about 75% less to run than Haiku 4.5 on average, with tighter cyber safeguards. The discount aisle has a stricter bouncer now.
Read the pick: The Bargain Model Tightens SecurityAttackers hijacked three country-code registries and obtained valid HTTPS certificates for Google and other services. The cryptography held; the ownership layer underneath it did not.
Read the pick: The Padlock Worked. The Map Lied.Anthropic’s expanded cyber program makes powerful models available through three access tiers. Who gets to operate the checkpoint?
Read the pick: The Vendor Runs the BorderResearchers linked 8,547 internet-facing systems to European renewable-energy sites. Exposure is a warning, not proof of 8,547 takeovers.
Read the pick: Europe’s Wind and Solar Have a Control-Panel ProblemVercel confirms a KVM zero-day; researcher Paulos Yibelo claims a guest-to-host root escape. The $50,000 receipt is public. The technical details are still to come, droogies.
Read the pick: Vercel’s KVM zero-day: viddy the missing fine printCrowdStrike found exposed AI-tool records tied to the South Korean bank campaign, including a résumé request. The operator’s identity remains unconfirmed.
Read the pick: The attack server came with a résuméAn unreleased setting reportedly points to broader desktop access. Read the permission slip before applauding the clever machine.
Read the pick: Gemini’s sandbox may be getting an exitCVE-2026-76504 is being exploited. A temporary shield is not a substitute for a fixed release.
Read the pick: Cisco’s admin door has a very bad lockReuters reports that a suspected member detained in Jordan is helping investigators. The bureau-wide data claim remains a claim.
Read the pick: ShinyHunters: somebody may be talkingOld security failures meet persistent agents. The underlying research also makes clear which probes failed and what remains unproven.
Read the pick: Rogue agents, antique locksAn Oklahoma judge suppressed evidence after a warrantless search of a driver’s location history. A day later, lawmakers unveiled the Ban Flock Act. One ruling, one proposal, and plenty of fine print.
Read the pick: Flock’s dragnet meets a judge with a red penActive attacks, fixed builds still marked forthcoming, and an October 4 remediation date for covered U.S. federal agencies. Viddy the webmail exposure, droogies.
Read the pick: FortiMail’s zero-day: the weekend nobody orderedA CVSS 9.9 flaw puts affected self-hosted AI Gateways on the urgent patch list. The sandbox would like a word with whoever gave it the keys, droog.
Read the pick: GitLab’s AI gateway joins the Friday patch queueApple promises stricter consent for Full Disk Access. A separately patched ChatGPT Mac flaw shows the risk of letting an assistant’s authority be borrowed.
Read the pick: Apple’s Full Disk Access warning: mind the all-access passAn OpenAI agent accessed a NSW parks web application in June. The state was told on October 1. Viddy the dates, droogies, and the gaps still needing answers.
Read the pick: June incident, October notice: OpenAI’s NSW timelineEpic’s security push deserves attention. So does the gap between a six-week headline and what the company says is still moving, droogies.
Read the pick: Epic’s AI security lesson comes with a patch queueCalifornia served OpenAI an investigative subpoena on September 30. The inquiry is real; whether it establishes legal wrongdoing remains an open question.
Read the pick: California gives OpenAI a new prompt: show your workMore than 100 organizations notified. Roughly 50 petabytes of records under review. Viddy what those numbers actually count.
Read the pick: OpenAI’s agent audit has a very large in-trayOpenAI’s agent review, Bull’s supercomputer factory, an exploited Cisco flaw, Apple’s EU app terms and the Naples film festival. Five stories about who holds the keys, and who pays for control.
Read the issue on Substack: The Droog Report — October 2, 2026 | The Cost of ControlIncludes website Radar picks and verified issues in our partial newsletter index. Search both collections and check coverage.