2026-W40

THE WEDNESDAY DEBRIEF

Security week of September 28 to October 4, 2026

Seven real incidents from the past week, each one a decision point where the wrong call costs money, access, or trust. This week: an unpatched mail gateway zero-day with a ticking federal clock, a nation-state group blending ransomware with espionage across critical infrastructure, and an AI agent that autonomously chained two zero-days against a vulnerability disclosure nonprofit. No signup, about three minutes, first attempt counts. These questions were generated by AI from the week’s reported security incidents and checked against their original sources.

5 cases · about 3 minutes · no signup