Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0. nginx-rift has been patched, but our security agent Vega has found a new 0 day. We will release the full technical writeup with ASLR bypass 30 days after the patch on nebusec.ai.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗝𝘂𝗻𝘁𝗮 𝗱𝗲 𝗔𝗻𝗱𝗮𝗹𝘂𝗰í𝗮 Meduza Locker hacking group claims to have breached Junta de Andalucía. According to the threat actor, the compromised data includes client, confidential, financial, HR, legal, marketing and technical data. Threat actor: Meduza Locker Sector: Gov / Mil / LE Data exposure (claimed): Not specified Data type: Client, confidential, financial, HR, legal, marketing and technical data, and reports Observed: Sep 28, 2026 Status: Pending verification ESIX©: 5.58 Full details and impact assessment on HackRisk.io

JUST IN: Anthropic researcher Joe Carlsmith says there are scenarios where AI would be “justified in going rogue” against humans if the systems were being mistreated or oppressed.

Some data we recently assembled on entrepreneurship/compute in Europe: eudata.vercel.app. We hope that one of the useful roles that Stripe can play is in collecting and publishing empirical data pertaining to entrepreneurship and industry in Europe. There's growing appetite to get Europe on a better footing, and cross-sectional comparisons can often shine light on where opportunities lie. If you're interested in this kind of thing, we publish more at stripeeconomics.substack.com.