Wiz Research
Context.ai OAuth Token Compromise
Compromised Context.ai OAuth tokens enabled attackers to perform a supply chain attack via trusted SaaS integrations. Learn how to assess the risk in your environment and how to prevent the next attack.
Monday, 20 April 2026
Everything this site carried that day, newest first. Stories are kept for a month, and the widely covered ones for a year.
Huntress
Nightmare-Eclipse Tooling Seen in Real-World Intrusion
Huntress observed in-the-wild use of Nightmare-Eclipse tooling, including BlueHammer, RedSun, and UnDefend, in a live intrusion involving FortiGate VPN compromise as the initial access, reconnaissance commands, and likely tunneling activity.
The Pragmatic Engineer / ByteByteGo / Architecture Weekly
Yoda Principle for better integrations
On why doing is better than trying for api and workflows design
Import AI (Jack Clark)
Import AI 454: Automating alignment research; safety study of a Chinese model; HiFloat4
At what point do the financial markets price in the singularity?
Wiz Research
Wiz and Databricks: Adding Databricks to the Wiz Security Graph
Extending Wiz Visibility with the Databricks Data & AI Platform
Wiz Research
From Code to Pipeline: Wiz Code Now Secures Your Build Environment
Threat actors have moved upstream, and while security teams have focused on the code developers write, the systems that build and deliver that code have remained a blind spot.
SpacePolicyOnline / The Space Review
Mirroring mango salad: How ISS culture shaped Artemis 2
During the Artemis 2 missions, the astronauts in Orion made a call to their counterparts on the International Space Station. Deana Weibel explains how the experience of the ISS means the Artemis astronauts are very different from those of the Apollo era.
SpacePolicyOnline / The Space Review
Big little rocket: The N1 Moon rocket and the cognitive dissonance of spy satellite photography
For years, most of the information about the Soviet Union's N1 rocket came from satellite images. Dwayne Day discusses how new images of the N1 are emerging to provide new insights about the Moon rocket.
SpacePolicyOnline / The Space Review
Commercial space station developers make their business case to NASA
Last month, NASA proposed major changes to its program supporting the development of commercial space stations, arguing markets for them have not emerged. Jeff Foust reports from a conference last week where several space station developers made their case there are markets.
SpacePolicyOnline / The Space Review
When the orbital layer is the kill chain
Experts have debated the role that artificial intelligence has played in the ongoing conflict with Iran. Bharath Gopalaswamy argues that the debate ignores the enabling role of space capabilities, which bring with them new challenges and vulnerabilities.
SpacePolicyOnline / The Space Review
Who watches the birds? Cold War era launch vehicle photographs (part 2)
Dwayne Day examines more images of Cold War-era spy satellites launches that were recently unearthed that help fill historical gaps.
Vercel (blog + changelog)
Kimi K2.6 on AI Gateway
Vercel AI Gateway Kimi K2.6 from Moonshot AI is now available on. The model focuses on long-horizon coding tasks, with generalization across languages such as Rust, Go, and Python and across front-end, devops, and performance optimization work. K2.6 can turn simple prompts into complete front-end…
OpenAI News
OpenAI helps Hyatt advance AI among colleagues
Hyatt deploys ChatGPT Enterprise across its global workforce, using GPT-5.4 and Codex to improve productivity, operations, and guest experiences.
Databricks / ClickHouse / DuckDB / Supabase / Neon / PlanetScale
Terraform & OpenAPI for ClickPipes is now Generally Available
Provision and manage ClickPipes resources “as code” using Terraform and OpenAPI, now with full connector coverage and improved usability