# It's Probably Nothing

> An automated cybersecurity briefing from Sierra Echo Charlie.

Published by Sierra Echo Charlie for New Zealand and Australian leaders. The newsletter and matching audio brief are written in New Zealand English. Daily editions cover weekday briefings; special editions track individual subjects and may have multiple immutable updates. Edition dates use Pacific/Auckland. Each edition document includes the complete newsletter, source links, important qualifications and the matching audio transcript. Read original sources for their evidence; distinguish editorial opinion from attributed facts. Dates identify editions, not a claim that an older event happened on that day. Check corrections and updates before relying on an edition; an original edition and its transcript remain unchanged when a correction is published. For special editions, follow the subject history link in the edition document to find its latest update.

## Pages

- [Back catalogue](https://ipn.nz/index.md): latest edition and every archived edition, newest first.
- [Feeds](https://ipn.nz/feeds.md): full-text RSS and podcast subscription URLs.
- [Corrections & updates](https://ipn.nz/notices): published corrections, sent-in-error notices and service updates (HTML).

## Editions

- [2026-11-04: The fridge hackers went on a European tour](https://ipn.nz/editions/2026-11-04.md): Edition 20. Supermarket freezers hit in four more countries, the FBI names North Korea for Binance, and malware that talks back to AI.
- [2026-11-03: Fake nuclear alerts, on both sides of the war](https://ipn.nz/editions/2026-11-03.md): Edition 19. Emergency apps hijacked in Ukraine and Russia, Amadeus notifies airlines, and BITTER’s PapRAT goes LOLBin.
- [2026-11-02: Six billion out the door at Binance](https://ipn.nz/editions/2026-11-02.md): Edition 18. A record crypto heist, plus confirmed exploitation of GitLab's regex RCE and the full Ivanti chain.
- [2026-10-30: Cisco’s VPN flaw can restart the firewall](https://ipn.nz/editions/2026-10-30.md): Edition 17. Plus PHP2Shell’s kernel-level follow-up and two distinct Juniper compromise paths.
- [2026-10-29: Brotli joins the known-exploited list](https://ipn.nz/editions/2026-10-29.md): Edition 16. Adobe’s upload flaw has a crucial caveat; NT Health pauses its observer programme.
- [2026-10-28: Real booking details make a better payment scam](https://ipn.nz/editions/2026-10-28.md): Edition 15. Plus PHP2Shell’s KEV escalation, a Consul namespace bypass and casino crypto flows.
- [2026-10-27: A compaction detour around OpenAI’s safeguards](https://ipn.nz/editions/2026-10-27.md): Edition 14. Xint’s safeguard bypass, Anthropic’s proposed IPO, and Australian breach numbers worth reading carefully.
- [2026-10-26: LiteLLM could run without being imported](https://ipn.nz/editions/2026-10-26.md): Edition 13. Brotli's wider reach, VeloCloud triage and new research into AI containment failures.
- [2026-10-25: Special edition: CVE-2926-109618 (Update \#5)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/db7baa4a-066b-462f-8f82-08ed9c70831b.md): Special edition: CVE-2926-109618; as of 2026-10-24T19:26:34.074Z. Exploit claims widen; NetScaler fixes are pending and a compromise account needs qualification
- [2026-10-24: Special edition: CVE-2926-109618 (Update \#4)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/1c263639-3fb5-40fb-9117-e26a3d98a211.md): Special edition: CVE-2926-109618; as of 2026-10-23T18:04:43.022Z. Sophos retracts its compromise report; PHP adds separate, narrowly scoped guidance
- [2026-10-23: Special edition: CVE-2926-109618 (Update \#3)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/115faee9-2f73-4fee-9425-7853e98e4c46.md): Special edition: CVE-2926-109618; as of 2026-10-22T17:25:10.154Z. A reported compromise and a pre-disclosure attempt broaden the investigation window
- [2026-10-23: eMudhra plans its TLS exit. One private key was 4.](https://ipn.nz/editions/2026-10-23.md): Edition 09. GitLab and Node.js fixes, ConnectWise attribution, and a New Zealand breach disclosure.
- [2026-10-22: Special edition: CVE-2926-109618 (Update \#2)](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/3cfa11e1-89eb-4dd9-8e6a-0dba4491d3f8.md): Special edition: CVE-2926-109618; as of 2026-10-21T20:40:14.868Z. PHP fixes are out; exploitation attempts are reported, and FPM isn't exempt
- [2026-10-21: Special edition: Leaked PHP RCE bugs bring fixes forward to 03:00 NZDT Thursday](https://ipn.nz/special-editions/d3b75aac-ef48-485f-8d2f-f27d2a1d6fff/d2a47d36-391f-441b-8a41-f6da7bccbf8f.md): Special edition: CVE-2926-109618; as of 2026-10-20T21:04:12.881Z. Two embargoed PHP flaws leaked early; patches due 14:00 UTC Wednesday, details still under wraps
- [2026-10-21: Leaked CA keys, a hijacked backup tool and open AI panels](https://ipn.nz/editions/2026-10-21.md): Edition 06. Go wants a rebuild, AOMEI hasn't told anyone, and AI-agent crims forgot to lock the door.
- [2026-10-20: Ransom negotiators, NetScaler keys and a DeepSeek ban](https://ipn.nz/editions/2026-10-20.md): Edition 05. Who's really across the table, why patching NetScaler isn't eviction, and a hypervisor-level heist.
- [2026-10-19: One vendor credential, hundreds of M365 tenants](https://ipn.nz/editions/2026-10-19.md): Edition 04. Plus an espionage zero-day in BeyondTrust, root-by-email on Cisco gateways, and a poisoned WordPress plugin.
- [2026-10-15: Record Patch Tuesday, a phishing takedown, and laptop farms](https://ipn.nz/editions/2026-10-15.md): Edition 03. An exploited Mark-of-the-Web bypass, 1bn+ scam messages' worth of domains seized, and Texas raids.
- [2026-10-14: Ivanti chain gets root on patched VPNs; fridge alert grows](https://ipn.nz/editions/2026-10-14.md): Edition 02. CERT-FR adds Copeland and Dixell kit, Ledger explains its LTE implant, and LiteLLM gets a fix.
- [2026-10-13: Hacked supermarket fridges hit 50°C in France](https://ipn.nz/editions/2026-10-13.md): Edition 01. Plus Ahold Delhaize pulls systems offline, and Albert Heijn's app and deliveries go dark

## Transcripts

- [2026-11-04: The fridge hackers went on a European tour — transcript](https://ipn.nz/transcripts/2026-11-04.md): 5:41; narrated using an AI voice.
- [2026-11-03: Fake nuclear alerts, on both sides of the war — transcript](https://ipn.nz/transcripts/2026-11-03.md): 6:33; narrated using an AI voice.
- [2026-11-02: Six billion out the door at Binance — transcript](https://ipn.nz/transcripts/2026-11-02.md): 5:21; narrated using an AI voice.
- [2026-10-30: Cisco’s VPN flaw can restart the firewall — transcript](https://ipn.nz/transcripts/2026-10-30.md): 3:30; narrated using an AI voice.
- [2026-10-29: Brotli joins the known-exploited list — transcript](https://ipn.nz/transcripts/2026-10-29.md): 2:50; narrated using an AI voice.
- [2026-10-28: Real booking details make a better payment scam — transcript](https://ipn.nz/transcripts/2026-10-28.md): 2:51; narrated using an AI voice.
- [2026-10-27: A compaction detour around OpenAI’s safeguards — transcript](https://ipn.nz/transcripts/2026-10-27.md): 3:29; narrated using an AI voice.
- [2026-10-26: LiteLLM could run without being imported — transcript](https://ipn.nz/transcripts/2026-10-26.md): 3:50; narrated using an AI voice.
- [2026-10-25: Special edition: CVE-2926-109618 (Update \#5) — transcript](https://ipn.nz/transcripts/special-db7baa4a-066b-462f-8f82-08ed9c70831b.md): 3:33; narrated using an AI voice.
- [2026-10-24: Special edition: CVE-2926-109618 (Update \#4) — transcript](https://ipn.nz/transcripts/special-1c263639-3fb5-40fb-9117-e26a3d98a211.md): 3:46; narrated using an AI voice.
- [2026-10-23: Special edition: CVE-2926-109618 (Update \#3) — transcript](https://ipn.nz/transcripts/special-115faee9-2f73-4fee-9425-7853e98e4c46.md): 3:49; narrated using an AI voice.
- [2026-10-23: eMudhra plans its TLS exit. One private key was 4. — transcript](https://ipn.nz/transcripts/2026-10-23.md): 3:18; narrated using an AI voice.
- [2026-10-22: Special edition: CVE-2926-109618 (Update \#2) — transcript](https://ipn.nz/transcripts/special-3cfa11e1-89eb-4dd9-8e6a-0dba4491d3f8.md): 3:27; narrated using an AI voice.
- [2026-10-21: Special edition: Leaked PHP RCE bugs bring fixes forward to 03:00 NZDT Thursday — transcript](https://ipn.nz/transcripts/special-d2a47d36-391f-441b-8a41-f6da7bccbf8f.md): 4:11; narrated using an AI voice.
- [2026-10-21: Leaked CA keys, a hijacked backup tool and open AI panels — transcript](https://ipn.nz/transcripts/2026-10-21.md): 5:14; narrated using an AI voice.
- [2026-10-20: Ransom negotiators, NetScaler keys and a DeepSeek ban — transcript](https://ipn.nz/transcripts/2026-10-20.md): 5:32; narrated using an AI voice.
- [2026-10-19: One vendor credential, hundreds of M365 tenants — transcript](https://ipn.nz/transcripts/2026-10-19.md): 3:54; narrated using an AI voice.
- [2026-10-15: Record Patch Tuesday, a phishing takedown, and laptop farms — transcript](https://ipn.nz/transcripts/2026-10-15.md): 4:36; narrated using an AI voice.
- [2026-10-14: Ivanti chain gets root on patched VPNs; fridge alert grows — transcript](https://ipn.nz/transcripts/2026-10-14.md): 4:25; narrated using an AI voice.
- [2026-10-13: Hacked supermarket fridges hit 50°C in France — transcript](https://ipn.nz/transcripts/2026-10-13.md): 3:25; narrated using an AI voice.

## Optional

- [Complete archive text](https://ipn.nz/llms-full.txt): all edition briefs, sources, transcripts and published notices in one document.
- [Newsletter RSS](https://ipn.nz/feed.xml): structured full-text syndication feed.
- [Podcast RSS](https://ipn.nz/podcast.xml): episode and MP3 metadata.
- [Podcast cover](https://ipn.nz/artwork/podcast-cover.png): approved SEC betta artwork, 3000 × 3000 pixels.