Security firm Rietta rolled out an emergency hotfix across its client base on July 29, 2026, after a Ruby on Rails ActiveStorage vulnerability—later named KindaRails2Shell and tracked as CVE-2026-66066—jumped from an unrated update to a 9.5/10 CVSS severity score within hours. The flaw, discovered by researchers at Ethiack, allows arbitrary file read and remote code execution through variant processing in Active Storage, a core Rails component used in Rails 8 and newer.
rietta.com
· 2026-09-04
According to Bloomberg's Mark Gurman, Apple is developing a privacy-focused home security camera and automation device paired with a new monitoring service, expected to launch next year. The camera would reportedly rely on AI analysis rather than raw video footage to track home activity, and it's positioned as part of a broader wave of device launches Apple has planned over the coming years.
androidauthority.com
· 2026-09-04
Amazon has cut the price of Blink's newest Mini 2K Plus indoor security camera to $21.99, a 45% discount off its regular price. The plug-in camera records at up to 2K resolution with HDR, low-light color vision, infrared night vision, two-way audio, and a built-in siren, and can also work outdoors with an optional weather-resistant adapter.
androidauthority.com
· 2026-09-04
According to Bloomberg's Mark Gurman, Apple is working on a privacy-focused home security camera and automation device that uses AI to analyze surroundings rather than recording video footage. This hardware will connect to a new subscription-based home security and monitoring service slated to arrive in 2027.
9to5mac.com
· 2026-09-04
SubImage, a seed-stage startup from YC's Winter 2025 batch built on the open-source Cartography project originating at Lyft, is hiring a founding engineer in San Francisco. The four-person team maps infrastructure like an attacker would to help security teams at scale-ups and enterprises identify and remediate vulnerabilities, and says demand from customers is growing quickly.
ycombinator.com
· 2026-09-04
Court filings reveal Homeland Security Investigations agents subpoenaed REI in March, seeking purchase records for anyone in the Minneapolis-St. Paul area who bought a particular dark green beanie since 2024. The request is one of 92 subpoenas issued as part of a federal lawsuit against 39 people, including protesters and journalists, connected to a demonstration at an ICE-linked church. Other subpoenas reportedly sought data from social media firms, airlines, telecom companies, and a car rental agency, with one airline allegedly asked to flag a defendant's future travel.
wired.com
· 2026-09-04
Security researchers, including work from SpecterOps, have documented at least 39 distinct methods that can undermine passkey authentication despite the underlying FIDO2 cryptography remaining secure. These techniques target the surrounding infrastructure rather than the cryptographic keys themselves, including browsers, operating systems, password managers, sync services, Bluetooth transport, and account recovery workflows. Many have working proof-of-concept tools, and some techniques are already surfacing in real-world attack activity.
bleepingcomputer.com
· 2026-09-04
Aqara, known mainly for security sensors, revealed a broad new smart lighting range at IFA 2026 covering indoor lamps, LED strips, and outdoor lighting. The lineup includes a multicolor standing lamp with 18 controllable zones, a table lamp, a low-ceiling downlight, a dense LED strip, and both string and permanent weatherproof outdoor lights. Pricing and release dates were not disclosed.
cnet.com
· 2026-09-04
Zscaler reported fiscal fourth-quarter adjusted earnings of $1.19 per share on revenue of $898 million, topping Wall Street forecasts of $1.09 and $877 million respectively. Revenue climbed 25% year-over-year, and annual recurring revenue reached $3.77 billion, while the company's net loss narrowed to $3.4 million from $17.6 million a year earlier. CEO Jay Chaudhry credited demand for the company's Zero Trust cloud security architecture, including a new version built for AI agents, for the strong results.
cnbc.com
· 2026-09-03
Senator Ron Wyden sent a letter to NSA Director General Joshua M. Rudd asking the agency to update its public guidance on VPN configurations. He argued that current recommendations don't help Americans facing foreign surveillance—including government staff, contractors, journalists and human rights defenders—choose which VPNs actually protect their communications.
arstechnica.com
· 2026-09-03
A writer reflects on how personal work has evolved over decades, starting with a teenage fast-food job at Roy Rogers and progressing through catering, temp work, teaching, and eventually a career as a creativity strategist. The piece frames Labor Day as an occasion to forecast future goals, backcast past experiences, rest, and dream about what comes next.
fastcompany.com
· 2026-09-03
Karyann Parkinson, a law student in Williamsburg, Virginia, let her 5-year-old son Sam walk roughly half a mile alone to a nearby pond within their gated community, a route he had safely traveled many times before. A passerby reported the child to security, triggering a police and Child Protective Services response that led to charges against Parkinson. A judge convicted her last week of contributing to the delinquency of a minor, a first-degree misdemeanor carrying a six-month suspended jail sentence, and CPS placed her on the state's child abuse registry for seven years.
reason.com
· 2026-09-03
GoKawiil