The Whistle: Chrome's eighth zero-day, Qubole's trusted path, and an AI proof of Signal
Google patched Chrome’s eighth in-the-wild zero-day of the year, Wiz published an October attack that walked through the front door Qubole customers built for their own data platform, and a researcher’s 33 zero-days made an RMM vendor unplug its own hosted service. Anthropic put a security model behind a verification program and a footnote, Google’s Carbon-powered agents produced a formal proof of Signal’s protocol implementation, and AWS gave every EKS pod the option of its own hardware-isolated virtual machine at no extra charge. France named Iran’s Revolutionary Guard Corps as the source of the freezer attacks, and the queue behind those stories ran from Barracuda email appliances to SonicWall MFA skips. Security leads, then everything else.