The Engineer

The Australian Federal Police arrested two alleged TeamPCP operators in Perth, but the crew's self-propagating worm had already compromised Trivy, KICS, LiteLLM and Telnyx and harvested more than 500,000 credentials, per Risky.Biz. Those are CI-resident scanners plus a proxy that concentrates every model-provider key in one process, so the loot was registry tokens, cloud keys and PATs. About 78,000 secrets from roughly 2,200 organizations already leaked publicly in July. That makes this a retrospective rotation problem, not a patch.

CISA added nine actively exploited CVEs between August 18 and 25, including Gitea CVE-2026-60004 at CVSS 9.8 and an MLflow tracking-server SSRF, per SANS reporting. Gitea turns plain repository write access into code execution as the service account by planting an executable Git hook, and upgrading does not remove hooks already written to disk. Several of those entries carry no NVD score at all, so a severity-sorted remediation queue ranks confirmed exploitation below a medium dependency warning.

Anthropic's prompt cache walks backward a maximum of 20 blocks looking for an earlier write, so pushing more conversation than that between two calls stops hits entirely — no error, no warning header, just a bigger bill. vLLM keys prefix blocks by a hash chain over token IDs, which makes matching order-sensitive by construction: two RAG requests retrieving the identical document set in a different order share exactly zero blocks. Your single hit-rate dashboard mixes prefill savings with a semantic cache that can return a wrong answer with a 200.

LinkedIn replaced GraphRAG in its production hiring assistant with a hierarchical summarization tree because incremental update cost, not retrieval quality, was the binding constraint. Absorbing one new user signal in a graph means entity resolution plus edge re-linking across an unbounded neighborhood, while a tree re-summarizes a single path root-ward. Benchmarks published in the same window put RocksDB write amplification at 4.56x for random inserts versus effectively none for sequential keys — the same lesson at the storage layer.

Google is shipping Encrypted ClientHello at the OS level in Android 17, covering all device traffic, per Risky.Biz. Any egress allowlist, DLP rule or CI network guardrail that reads the plaintext SNI field to decide what to permit loses that input, and it will not raise an error — it will simply stop seeing destinations. The named migration paths are explicit forward-proxy CONNECT logging or DNS-layer policy with pinned resolvers, and doing it on your schedule beats discovering the gap in an incident review.