The HackWednesday archive
Security analysis, incident lessons, and practical guides for teams working with AI. Search the archive or choose a topic.
AI in Security
The September 2, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI-assisted Awaiting editor review
Supply Chain Security
Atlassian's public security material shows the limits of peer review and green builds at modern scale. The lesson for security teams is not to abandon review, but to turn review into continuous assurance backed by metadata, scanning, provenance, logs, and post-incident learning.
AI-assisted Awaiting editor review
AI Agent Security
NIST, OWASP, and MITRE all point to the same AI security lesson: model guardrails help, but they are not a complete defense. Cybersecurity programs now need to teach how attackers use influence, intent shaping, prompt injection, model probing, and tool abuse to turn helpful models into security liabilities.
AI-assisted Awaiting editor review
Incident Response
The NSA, FBI, and Cyber National Mission Force warned that China-linked QTFY actors used QScan, QTRouter, compromised IoT devices, and covert proxy infrastructure to target military, government, telecommunications, higher education, and critical infrastructure networks. The defender lesson is clear: patch fast, reduce exposed operational data, isolate critical systems, and hunt with evidence.
AI-assisted Awaiting editor review
Incident Response
Run a focused Hack Wednesday review with an owner-led agenda, exposure checks, verified fixes, and a copyable vulnerability-response handoff for your team.
AI-assisted Awaiting editor review
Supply Chain Security
PR reviews are no longer enough for modern GitHub security. Code, AI-generated changes, dependencies, secrets, CI logs, and runtime signals are growing too fast. The next shift-left model is continuous security monitoring across the full software path.
AI-assisted Awaiting editor review
Security Leadership
A practical, SEO-friendly overview of public cybersecurity and security infrastructure companies that appear across major cybersecurity ETFs in 2026, written for security teams, CISOs, and market-aware builders. This is not financial advice.
AI-assisted Awaiting editor review
AI in Security
New August 2026 guidance from OpenAI and Google Cloud suggests the fastest security teams will treat AI-assisted source-code review as a core control, not a side experiment.
AI-assisted Awaiting editor review
AI in Security
The August 26, 2026 HackWednesday weekly signal turns current security headlines into a practical incident, vulnerability, and AI-risk triage queue.
AI-assisted Awaiting editor review
AI in Security
Akamai's 2026 Enterprise AI Usage Risk Report and The Hacker News coverage point to a concentrated AI risk pattern: a small group of power users can create disproportionate exposure through personal accounts, browser extensions, IDE copilots, and autonomous agents.
AI-assisted Awaiting editor review
AI Agent Security
A copy-friendly playbook for turning Codex automations and ChatGPT Work scheduled tasks into useful daily, weekly, and monitoring workflows for CISOs, AppSec, SOC, GRC, platform, and engineering teams.
AI-assisted Awaiting editor review
CISO AI Governance
Quantum computing changes the cryptographic risk model, while photonics changes how data moves through chips, data centers, clocks, sensors, and future AI systems. Security teams should prepare for both without treating either as magic.
AI-assisted Awaiting editor review
