https://purplelink.llc/blog/digest/ Daily curated reading at the intersection of cybersecurity, AI, research, and entrepreneurship. Curated by Benjamin Ampel. en ben@purplelink.llc (Benjamin Ampel) https://purplelink.llc/blog/digest/2026-07-11.html https://purplelink.llc/blog/digest/2026-07-11.html Sat, 11 Jul 2026 10:00:00 +0000 Benjamin Ampel Ghostcommit prompt injection bypasses AI code reviewers, GPT-5.6 Sol Ultra claims a math proof, Apple sues OpenAI for trade secret theft, and U-Boot firmware vulnerabilities threaten boot-level persistence. https://purplelink.llc/blog/digest/2026-07-10.html https://purplelink.llc/blog/digest/2026-07-10.html Fri, 10 Jul 2026 10:00:00 +0000 Benjamin Ampel GigaWiper destructive backdoor, HTML comment-stuffing phishing evasion, Anthropic's interpretability breakthrough, and a former BlackCat negotiator sentenced to 70 months. https://purplelink.llc/blog/digest/2026-07-09.html https://purplelink.llc/blog/digest/2026-07-09.html Thu, 09 Jul 2026 10:00:00 +0000 Benjamin Ampel AI coding agents triggering EDR rules, GhostApproval symlink attacks, BYOVD ransomware, Mistral's 8B navigation model, and SK Hynix's 7x-oversubscribed Nasdaq listing dominate today's digest. https://purplelink.llc/blog/digest/2026-07-08.html https://purplelink.llc/blog/digest/2026-07-08.html Wed, 08 Jul 2026 10:00:00 +0000 Benjamin Ampel LLM hallucination-based botnet assembly, GitHub agentic workflow data leakage, GhostLock Linux kernel root escape, UAT-7810 LONGLEASH malware, SambaNova's $11B raise, and data center labor constraints dominate today's digest. https://purplelink.llc/blog/digest/2026-07-07.html https://purplelink.llc/blog/digest/2026-07-07.html Tue, 07 Jul 2026 10:00:00 +0000 Benjamin Ampel LLM-driven ransomware (JadePuffer), KVM guest-to-host escape CVE-2026-53359, Tenda firmware backdoor, Iran's Cavern C2 framework, and Anthropic's covert user tracking dominate today's digest. https://purplelink.llc/blog/digest/2026-07-06.html https://purplelink.llc/blog/digest/2026-07-06.html Mon, 06 Jul 2026 10:00:00 +0000 Benjamin Ampel JadePuffer ransomware runs entirely via LLM agent, SkillCloak evades AI agent skill scanners, TrojPix leaks air-gapped data via video cable RF emissions, and Samsung DRAM pricing signals AI infrastructure cost shifts. https://purplelink.llc/blog/digest/2026-07-05.html https://purplelink.llc/blog/digest/2026-07-05.html Sun, 05 Jul 2026 10:00:00 +0000 Benjamin Ampel LLM-automated ransomware (JadePuffer), North Korea's PolinRider supply-chain campaign, AI grid instability, and Claude Fable's real-world coding costs dominate today's digest. https://purplelink.llc/blog/digest/2026-07-04.html https://purplelink.llc/blog/digest/2026-07-04.html Sat, 04 Jul 2026 10:00:00 +0000 Benjamin Ampel FortiBleed actors pivot to ransomware monetization, ARToken PhaaS exposes EvilTokens M365 toolkit, and the token ROI crisis hits SaaS operators hard. https://purplelink.llc/blog/digest/2026-07-03.html https://purplelink.llc/blog/digest/2026-07-03.html Fri, 03 Jul 2026 10:00:00 +0000 Benjamin Ampel PamStealer macOS infostealer, FortiBleed ransomware monetization, FBI NetNut proxy seizure, and AI compute ROI crisis dominate today's digest. https://purplelink.llc/blog/digest/2026-07-02.html https://purplelink.llc/blog/digest/2026-07-02.html Thu, 02 Jul 2026 10:00:00 +0000 Benjamin Ampel AI-autonomous ransomware (JADEPUFFER), ChocoPoC RAT targeting security researchers, FortiBleed linked to Lynx/INC, and adversarial detection via loss-landscape sharpness headline today's digest. https://purplelink.llc/blog/digest/2026-07-01.html https://purplelink.llc/blog/digest/2026-07-01.html Wed, 01 Jul 2026 10:00:00 +0000 Benjamin Ampel Phantom squatting exploits AI-hallucinated domains, ClickFix malware shifts to API-driven polymorphic delivery, BioShocking prompt injection bypasses AI browser guardrails, and Claude Sonnet 5 launches near Opus 4.8 performance as export controls on Fable 5 and Mythos 5 lift. https://purplelink.llc/blog/digest/2026-06-30.html https://purplelink.llc/blog/digest/2026-06-30.html Tue, 30 Jun 2026 10:00:00 +0000 Benjamin Ampel Apple patches AI-discovered WebKit bugs, BioShocking attack leaks credentials from AI browsers, BlueHammer ransomware exploitation confirmed, and Databricks' $6.9B run-rate signals enterprise AI budget shifts. https://purplelink.llc/blog/digest/2026-06-29.html https://purplelink.llc/blog/digest/2026-06-29.html Mon, 29 Jun 2026 10:00:00 +0000 Benjamin Ampel GLM 5.2 outperforms Claude on cybersecurity benchmarks, StegoAd hides malware in Edge extension images, and a client-side libssh2 RCE flaw gets a public PoC. https://purplelink.llc/blog/digest/2026-06-28.html https://purplelink.llc/blog/digest/2026-06-28.html Sun, 28 Jun 2026 10:00:00 +0000 Benjamin Ampel Russian GRU pivots to stealing Signal backup recovery keys, a clean-repo malware technique blinds AI coding agents, DSpark speculative decoding cuts LLM inference latency, and Asian AI startups fill the Anthropic export-ban vacuum. https://purplelink.llc/blog/digest/2026-06-27.html https://purplelink.llc/blog/digest/2026-06-27.html Sat, 27 Jun 2026 10:00:00 +0000 Benjamin Ampel GPT-5.6 Sol and Anthropic Mythos 5 face US government access controls; Russian APT pivots to Signal backup key theft; SharkLoader deploys Cobalt Strike in new campaign. https://purplelink.llc/blog/digest/2026-06-26.html https://purplelink.llc/blog/digest/2026-06-26.html Fri, 26 Jun 2026 10:00:00 +0000 Benjamin Ampel Turla's new STOCKSTAY .NET backdoor, Gamaredon arsenal upgrades, macOS 'Gaslight' malware evading AI analysis, Alibaba's 28.8M-exchange Claude cloning attack, and a German court ruling on AI liability shape today's digest. https://purplelink.llc/blog/digest/2026-06-25.html https://purplelink.llc/blog/digest/2026-06-25.html Thu, 25 Jun 2026 10:00:00 +0000 Benjamin Ampel Anthropic accuses Alibaba of model extraction, OpenAI ships its Jalapeno inference ASIC with Broadcom, Cisco SD-WAN CVE-2026-20245 exploited two months pre-disclosure, and Operation Endgame disrupts Amadey/StealC with 27M credentials recovered. https://purplelink.llc/blog/digest/2026-06-24.html https://purplelink.llc/blog/digest/2026-06-24.html Wed, 24 Jun 2026 10:00:00 +0000 Benjamin Ampel FortiBleed harvests 110M credentials from 430K FortiGate firewalls, Scattered Spider pleads guilty, fake AI agent skills bypass all scanners, and post-quantum crypto gets a hard 2030 federal deadline. https://purplelink.llc/blog/digest/2026-06-23.html https://purplelink.llc/blog/digest/2026-06-23.html Tue, 23 Jun 2026 10:00:00 +0000 Benjamin Ampel OpenAI's GPT-5.5-Cyber and Patch the Planet initiative dominate today's digest, alongside FortiBleed credential theft, AutoJack agent exploitation, Squidbleed's 29-year-old proxy flaw, and PE software deal collapse mechanics. https://purplelink.llc/blog/digest/2026-06-22.html https://purplelink.llc/blog/digest/2026-06-22.html Mon, 22 Jun 2026 10:00:00 +0000 Benjamin Ampel LLM-guided dark web taxonomy, MCP security vulnerabilities, AryStinger proxy botnet, Canada's first CSIS botnet-remediation warrant, and SpaceX's $20B post-IPO bond sale headline today's digest.