🕵️ RESEARCH & DEEP DIVES
Anthropic announces a complete formalization of Fermat's Last Theorem proof
Anthropic has announced a complete formalization of the proof of Fermat's Last Theorem.- Anthropic announced a complete formalization of the proof of Fermat's Last Theorem, the result long considered too large to 'fit in the margin'.
- Fermat famously claimed to have a 'truly marvelous proof' of the theorem but never wrote it down, saying the margin of his page was too narrow to contain it.
- The announcement was covered on Security Boulevard in a post titled 'A "proof" of Fermat's Last Theorem that fits the margin'.
GRC transformation: continuous, AI-native cyber risk assurance for enterprise CISOs
GRC transformation is the shift from periodic, check-the-box governance, risk, and compliance to continuous, AI-native cyber risk assurance measured in business outcomes.- Applies to enterprise CISOs running governance, risk, and compliance (GRC) programs
- GRC transformation is defined as moving GRC from periodic, check-the-box paperwork to continuous, AI-native cyber risk assurance measured in business outcomes
- The framing positions the shift as an organizational change, not a tooling upgrade
Claude Fable Solves a Historical Cipher — Schneier on Security
US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities — SecurityWeek
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws — SecurityWeek
Ivanti Patches Critical Flaws Across Enterprise Security Products — SecurityWeek
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval — The Hacker News
Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets — The Hacker News
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok — The Hacker News
Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Mar... — CVE ThreatInt
CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI ScannerCyberPane... — CVE ThreatInt
GitPython before 3.1.60 Denial of Service via ReDoSGitPython before 3.1.60 co... — CVE ThreatInt
GitPython 3.1.59 Local File Content Oracle via --no-indexGitPython 3.1.59 fai... — CVE ThreatInt
PasswordPusher before 2.11.1 Race Condition View Limit BypassPasswordPusher b... — CVE ThreatInt
SiYuan before v3.8.2 Path Traversal via removeRiffDeckSiYuan versions before ... — CVE ThreatInt
SiYuan before v3.8.2 Stored XSS via Asset PreviewSiYuan before v3.8.2 contain... — CVE ThreatInt
SiYuan before v3.8.2 Stored XSS via unescaped asset filenamesSiYuan before v3... — CVE ThreatInt
SiYuan before v3.8.2 Stored XSS via Bazaar iconURLSiYuan before v3.8.2 contai... — CVE ThreatInt
SiYuan before v3.8.2 Stored XSS via notebook template pathsSiYuan before v3.8... — CVE ThreatInt
Hackers Target Claude, Cursor and Codex AI Agents to Steal Tokens and Prompt Histories — Cyber Security News
Hackers Abuse Google Sheets to Hijack Crypto Wallet Addresses in ClickFix Attacks — Cyber Security News
Cult. — @GossiTheDog@cyberplace.social
Newfold Plugins Authentication Bypass (CVE-2026-80099) — thehackerwire.com (discovered)
Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine — r/netsec
Fortinet Privileged Access Agent: Any Site Could Control Your Proxy and Watch Your Tab — r/netsec
How to Prove DDoS Defences to a Regulator — securityboulevard.com (discovered)
SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise — securityboulevard.com (discovered)
Does ISO 27001 Require Penetration Testing? — securityboulevard.com (discovered)
How to see and control your AI token spend – FireTail Blog — securityboulevard.com (discovered)
How Amp got its SOC 2 type II pentest evidence in hours — securityboulevard.com (discovered)
As the cyber world grows ever more insanely intense, don’t miss today’s Metacurity, with the most consequential infosec... — @metacurity@infosec.exchange