SafeWave blog
What’s changing in security and AI technologies – and what it means for your business. Brief analyses of new threats, reports, regulations, and technologies. Each includes data and sources, just like our solution pages, and a conclusion: what to check, what to do.
Three AI assistant weaknesses in one week: secrets in Claude Code files on GitHub, Claude Dispatch and browser extensions, and a Lockdown Mode bypass in ChatGPT.
CVE-2026-123158 “sshole”: on Alpine Linux, a very long password opens passwordless accounts. Exploits appeared 9 hours after disclosure. What to patch and what to check in the logs.
Yubico announces YubiID: identity verification for key enrollment and recovery, with Entra, Okta, and Ping integrations. What this changes and what to do today.
Norad disclosed a breach of its grant portal: logins via 27 compromised accounts, data of 20,614 users from 12,511 organizations at risk. Implications for partner portals.
Chainalysis: All users’ password hashes and active tokens exposed, KYT and Reactor disabled. Supply chain risk for banks and institutions with AML obligations.
GPT-6 Cyber rated “Critical”: 81 new flaws in Firefox, 948 working exploits for the Linux kernel, access restricted to Daybreak Red. What this means for defenders.
CVE-2026-119977 (CVSS 8.1) is an RCE in WordPress core exploited during updates. Patch in 7.1.4. What this means for anyone maintaining WordPress.
APT29 ‘Poisoned Source’: Watering-Hole and DarkSword Chain for iOS/Android, with Supply Chain Compromise via Analytics Service. Implications for the CEE Region.
CVE-2026-58115 (CVSS 10) in Node-RED on Siemens SIMATIC IoT2050 gateways is being actively exploited. Here is how the attack works and what to do in OT environments.
Coming soon
The first Technology Intelligence analyses will appear here shortly. In the meantime, check out how we write them, or explore our solutions.
The same standard as our solution pages: facts with sources first, then the conclusion. No unverifiable numbers, no rewritten marketing materials.
What happened: a new report, incident, vulnerability, or change in regulations or technology.
Numbers only with sources – a citation for each and a list of sources at the end of the post.
What it changes for companies in Poland: risk, costs, obligations arising from NIS2, Poland’s KSC Act, or DORA.
What to check or do – and which solution helps with it.
Every analysis ends with the question “what to do about it?” You’ll find the answer in the eight areas where we help – and NIS2, KSC, and DORA requirements in the Compliance and Audits area.
Tell us what challenges your company is facing. The most interesting questions become analyses – and we’ll answer yours directly.