How-To: Keep Your Bots’ API Keys Out of Plain Environment Variables With systemd Credentials
The Trigger.dev breach was all about environment variables. On my own boxes, I keep bot API keys out of plain env vars and unit files with…
Date
November 2026
How-To: Hunt for Persistence on a Linux Server
The SysGoRAT report is a good reminder that attackers don’t just get in. They set things up so they can keep coming back. Here’s the quick…
How-To: Put Spend Caps and Alerts on Your AI API Keys
After Mandiant’s LLMjacking report (stolen keys running up $100K+ a day), I went back over my own AI keys. Here’s the checklist I use. It works…
Google Takes Down a 1.3 Million-Device Android TV Box Botnet and Bans the Maker
Google led a takedown of a botnet of more than 1.3 million Android devices, mostly TV set-top boxes. Google says it’s highly confident the box maker,…
Hackers Defrost Freezers at 115+ European Supermarkets
Hackers changed the temperature settings on refrigeration systems at supermarkets across Europe. In some stores they shut freezers off or kicked on the defrost cycle, and…
Trigger.dev Breach: Attackers Got Some Customers’ Environment Variables
If you use the hosted Trigger.dev platform, check your email. The company disclosed on Sunday that an attacker got into environment variables belonging to “a subset…
LLMjacking: Stolen AI Keys Are Costing Companies $100K+ a Day
Google’s Mandiant says criminals hijacking corporate AI access are running up more than $100,000 a day in token charges. At some victims, the total hit $1…
Grok API Text Gets an Invisible Watermark Starting November 7
Starting November 7, text from the Grok API will carry an invisible watermark by default, according to a new page in SpaceXSI’s developer docs. The company…
OpenAI Is Merging ChatGPT’s Chat and Work Tabs, and Codex Shares the Same Limits
OpenAI is merging ChatGPT’s Chat and Work tabs into one, according to an email to users reported by TechCrunch. It’s rolling out to a small group…
Grok Bot Users Hit Weekly Limits Early, and Musk Says Costs Were ‘Unsustainably High’
This one hits close to home. Over Halloween weekend, a lot of Grok Bot users found their weekly limits maxed out early. Some said their usage…