Get the brief

Choose weekly, daily, or both. The threats that change the risk picture, assessed at the executive level. No CVE dumps, no vendor pitches, no noise.

Already a subscriber? Update your preferences here, enter your email, check the boxes for what you want, and resubmit.

One email. Every Sunday. Unsubscribe anytime. Stored with Buttondown, no tracking pixels.

Also from the same intelligence shop: Attack · Defense

Here's what last week looked like

  • The firewall, the management console and the hosted service with PHP inside them wait on the vendor for a fix, and Palo Alto Networks and Cisco had shipped none as of October 22nd, so a product past end of support or from a vendor that no longer exists is a rip-and-replace candidate.
  • One stolen service-account credential at ConnectWise reached at least 162 Microsoft 365 accounts, because outside apps set up by an IT provider can hold broad standing access with no second check, so the list that matters is which apps hold that access in your account.
  • JPMorgan says a customer who hands an AI agent a login is responsible for what it does, while the EU makes banks refund unauthorized payments first, so a company that lets staff connect an agent to a bank login likely owns the loss until the bank agreement says otherwise.
  • Governments are lending out emergency oil with interest, but the release is mostly crude and the refining system is stretched, so a fuel or freight contract that assumes a release will cap an energy price spike is assuming capacity that is not there.
  • Iran's anonymous officials say it plans to cut Gulf undersea cables and block repairs if the US strikes again, which would likely disrupt communications with Gulf states and the services that depend on them even if US customers see little direct effect.
  • NOAA puts an 83% chance on a historic El Niño for October through December, which pushes up food, fertilizer and energy prices and hits supplier regions such as Australia, Chile and Indonesia, so watch cost and delivery dates and expect insurers to price the weather into renewals.
  • Tariff exemptions on 178 kinds of Chinese goods expire after November 9th, and a tariff that returns is a cost that can be passed down the chain to you even if you import nothing yourself.
1. A Flaw in the Code Behind Most Websites Will Be Patched on Your Vendors' Schedule, Not Yours
2. One Stolen Credential at a Backup Vendor Opened at Least 162 Companies' Microsoft 365 Accounts
3. JPMorgan Says an AI Agent Acting on Your Login Is Your Problem, and Other Banks Are Shutting Agents Out Too
4. Governments Are Borrowing Against Their Fuel Reserves, and the Shortage Is in Diesel
5. Renewed Strikes on Iran Are Being Weighed, and Anonymous Iranian Officials Name Undersea Cables as a Target
6. A Historic El Niño Is Likely by Year-End, and It Raises Food Costs and Insurance Risk
7. Tariffs Could Return on 178 Kinds of Chinese Imports After November 9th

Read the full brief