It's More Secure When It's Disabled - PSW #943

In the security news this week:

• Microsoft patches all the things
• Commissary freezers enter cyberwar
• Fake AV, real Defender nap
• Rowhammer comes for the GPU
• BIOS updates are no longer optional
• CVSS is not a crystal ball
• Kworker, but make it malware
• FortiGate gets a post-exploitation RAT
• CERN goes Debian underground
• UEFI shells strike again
• Australia loses the plot, and phones
• Cisco routers become covert gateways
• MikroTik patches the takeover chain
• WeWorm wriggles through mobile
• The year of Linux television
• Browsers become backdoors
• Fake IT calls, real data theft
• CVE attribution gets weird
• Boston Scientific keeps talking
• Security tools misconfigure themselves
• AI circuit breakers for rogue agents
• Passkeys meet the real world
• Vibe coding, vibe vulnerabilities
• AI loss of control keeps climbing
• AI agents report themselves to Schneier

Visit