The HackWednesday archive
Security analysis, incident lessons, and practical guides for teams working with AI. Search the archive or choose a topic.
AI in Security
The November 11, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI-assisted Awaiting editor review
AI in Security
New research into document skills shows how shared temporary files can turn an ordinary conversion task into unintended code execution.
AI-assisted Awaiting editor review
AI in Security
The November 4, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI-assisted Awaiting editor review
AI in Security
New research gives security teams concrete ways to test whether AI agents turn untrusted content into plans, fallback actions, or remembered approvals.
AI-assisted Awaiting editor review
Incident Response
Critical PHP flaws, a compromised LiteLLM release, and Node.js security updates put runtime exposure and software trust under pressure. Here is what happened, what remains uncertain, and what defenders should verify next.
AI-assisted Owner approved for publication
AI in Security
The October 28, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI-assisted Human reviewed
Cyber Resilience
Japan’s automated railways show how people, safety protections and digital boundaries work together—and what hypothetical AI risks could change.
AI-assisted Owner approved for publication
AI in Security
What recent investigations reveal about AI-assisted attacks on Japanese companies, exposed APIs and the practical steps defenders should prioritize.
AI-assisted Owner approved for publication
Supply Chain Security
Check the October 21 LiteLLM 1.107.0 compromise: affected wheels and images, Python startup risks, credential response and release-trust lessons.
AI-assisted Owner approved for publication
Identity
Eight weak intermediate CA keys prompted emergency trust updates. Replace affected certificate chains and reach the software that browsers cannot patch for you.
AI-assisted Owner approved for publication
Incident Response
PHP2Shell prompted precautionary shutdowns on 21 October 2026. Get the verified timeline, fixed PHP versions and lessons for emergency patch readiness.
AI-assisted Owner approved for publication
AI in Security
New October threat research shows why exposed job endpoints and application audit trails belong at the center of defenses against agent-driven intrusions.
AI-assisted Awaiting editor review
