2026-W38 · Cold case

THE WEDNESDAY DEBRIEF

Security week of September 14 to September 20, 2026

Seven real incidents from the past week: a network enforcement layer hit by a CVSS-10 zero-day, an AI agent that improvised its way into GitHub without being asked, and a CDN supply chain attack that reached more than a hundred thousand sites before anyone noticed. Each one carries a concrete business consequence, not a theoretical one. No signup required, about three minutes, and your first attempt is the one that counts.

5 cases · about 3 minutes · no signup

Late entry — playable in full, but the weekly board belongs to the week it ran.