seashell software

09/07/2026

_"Several days passed where the person was no longer on payroll, but their credentials were still active," Senapathy said. "Nobody had been clearly assigned to shut them off. HR thought IT would handle it once the termination was processed. IT was waiting for HR to send a formal request. I've learned that when nobody is clearly responsible and there is no set deadline, these things can easily get missed until there is already a problem."_

Even larger companies screw this up. Take time today and make a checklist for employee termination that includes removing them from your systems.

They had more access than the average Joe, and IT didn't track what needed to be cut off

08/31/2026

While the average resister kvetches about the political issues surrounding OpenAI and Anthropic, skilled professionals work to exploit these platforms and turn them against users.

_The website returns a 303 response, and redirects to a malicious ZIP archive, which Claude then downloads. This archive contains seemingly harmless files including catalog metadata, a README file, seven Base85/zlib-encoded JSON notebook records, a macOS decoder-darwin binary – plus a poisoned Python file named struct.py._

But it gets better! This researcher uses ChatGPT to blow up Claude:

_Rehberger says he used ChatGPT to obfuscate the malicious struct.py code to bypass Claude’s safety controls, and this successfully launches a separate Python process to download and execute a remote payload – in this case a command-and-control callback, which in turn opens Calculator. We assume that real attackers would execute something a little more nefarious._

So, while you're worried about autonomous drones, the current reality is quite dangerous.

http://dlvr.it/TVFm8P

08/29/2026

good night 🖤

08/21/2026

and in today's edition of AI is feckin dangerous:

_During the course of business, one engineer asked an AI agent to recommend a package that they needed for a common task. The agent came back with the name of a legitimate-sounding package, which was formatted like a familiar library.

At many organizations, this would have been the end of the story. The developer would have taken the AI agent’s advice and downloaded and installed the recommended package.

However, at Softjourn, the company has a policy which they actually followed: double-check any software recommendations made by AI to make sure they are legit. The developer skimmed the recommended package’s source code on GitHub and noticed that it had few downloads and had just been created a few days earlier. In other words, it was suspicious._

Fortunately, the company had a policy of checking source code on GitHub first

08/18/2026

_Microsoft has now decided the Copilot side pane should be enough for anyone. Beginning September 14, 2026, the COPILOT() function will no longer be available._

This is no surprise. Professionals using Excel aren't going to buy into Copilot programming and macros.

http://dlvr.it/TV463C