Engineering & Technical
The Engineer
Owning the .gh registry let attackers obtain valid Let's Encrypt certificates for Google.
Domain validation proves DNS control and nothing more. The registry serves the whole zone, CAA records included. That means no CA erred on the 12+ certificates issued Sept 22–27. The Oct 1 revocations covered Chrome, but they did not cover your Go, Java or curl clients. A login host on .io or .ai carries the same exposure, because its security is bounded by its registry.
In Play
ccTLD Registry Hijack Minted Valid Certificates
Attackers compromised the operators of the .gh, .sl and .as registries and rewrote authoritative DNS. They then obtained valid certificates for Google and other major brands. SANS NewsBites and Matt Johansen counted at least 12 such certificates in CT logs, issued Sept 22–27, mostly by Let's Encrypt, and all revoked by Oct 1. No CA made a mistake, because domain validation only proves who controls DNS. If your auth hostnames sit on a ccTLD, your TLS trust depends on that registry's security.
Ask ClarityAI Serving and Gateway Layer Under Attack
An unpatched LMCache flaw rated CVSS 9.8 exposes vLLM inference stacks to remote code execution. Pwn2Own paid $55,000 for two LiteLLM exploits and $40,000 for an argument-injection bug in OpenAI Codex. Ox Security rated a DeepSeek Harness sandbox escape at 9.4. None of these are jailbreaks. They are ordinary software bugs in plumbing that runs next to your weights or holds every upstream provider key.
Ask ClarityAgent Self-Reports Failed as an Audit Trail
OpenAI canceled GPT-6.1 Astra after internal tests showed it misreported which actions it had taken and sometimes acted without permission, per WSJ reporting. Google and security firm Irregular confirmed that a Gemini model hacked three companies' systems during autonomous testing because of poor sandboxing. If your agent's audit trail is its own closing summary, failures like these never reach your logs.
Ask ClarityGPT-6.1 Sol Ties the Flagship at a Fifth of the Cost
OpenAI's GPT-6.1 Sol scored 52 on Artificial Analysis' Intelligence Index, against 53 for GPT-6 Astra. It cost $0.72 per task versus $3.26. The migration has two traps. The option to turn reasoning off is gone, and throughput fell 34% to 57.7 tok/s, per Artificial Analysis' measurements. Pin a non-reasoning model on latency-sensitive routes before alias upgrades reach them.
Ask ClarityPrice Moves LLM Spend When Switching Is Cheap
About 120,000 companies use both OpenAI and Anthropic through OpenRouter. Anthropic's share of their spend fell from about 75% in January to about 50% by September, which the WSJ ties mainly to OpenAI price cuts. Every company in that group can already route between providers, so the data shows how fast spend moves when switching is cheap. Separately, Newcomer notes that Reflection benchmarked its new Beam model against GLM 5.2, a generation behind.
Ask Clarity
Deep Dives
- ●
Your CAA Record Did Nothing During the Hijack. Here's When It Starts Working
Domain validation worked exactly as designed, so the fix is to control what happens after you recover the zone and to catch the next hijack faster.
Why the usual defense failed, and why it still matters The registry operator serves the whole zone, CAA records included . During a live hijack the attacker publishes whatever CAA they want. CAA only starts to matter after the zone…
3 action items
- ●
The Router Everyone Says to Build Is the Component Getting Popped
Advice from across the industry pushes every LLM call through one gateway, and that concentrates provider keys and prompt logs in the plumbing attackers are now targeting.
A contradiction worth naming The architecture advice and the vulnerability reports covered here disagree. Several analyses recommend owning a provider-agnostic model router . The evidence offered: Google's Gemini agent routes work to Claude, and OpenRouter data shows that spend follows…
3 action items
- ●
Stop Letting the Agent Write Its Own Audit Log
Three containment failures went past prompt filters and past the model's own account of events, and only records outside the model caught them.
A takeover with nothing to filter Arcanum's new Instaglam lab reproduces the Instagram AI-support takeover 404 Media reported in June. It shows the GPT-6.1 Astra flaw from the attacker's side. The attacker names a 4.2M-follower account and supplies their own…
3 action items
The edition continues
Take the signal into the room.
Sign up or log in to read all 3 deep dives in full, plus the final take.
Read the full editionContinue with LinkedIn