access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Okta und AWS vertiefen Partnerschaft: Identitätssicherheit für KI-Agenten im Fokus
Okta und AWS erweitern ihre Partnerschaft, um KI-Agenten sicher zu verwalten, Zugriffe zu kontrollieren und Identity Governance in der Cloud zu stärken. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/okta-und-aws-vertiefen-partnerschaft-identitaetssicherheit-fuer-ki-agenten-im-fokus/a47026/ also interesting: Die besten IAM-Tools AI Compliance Tools: What to Look For FireTail Blog AI agents can bypass guardrails and put credentials at risk, Okta…
-
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-protect-refrigeration-networks/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks Cybersecurity Snapshot: Tenable Report Spotlights…
-
The Flood is Coming And The Pipes Were Already Full
Tags: updateAn update on Athena, and some unsolicited predictions on what’s coming nextOn Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven’t. I’ve spent the summer looking at what these models find, and the gap he describes between what they can do and what the rest…
-
Dark Project Ransomware Gang Claims 38 Victims Across 8 Countries, Targeting Healthcare and Manufacturing
Dark Project, an emerging financially motivated ransomware operation, has claimed 38 victims across eight countries in the supplied threat intelligence snapshot, with manufacturing and healthcare bearing the heaviest exposure. The group combines data theft, system encryption, and public disclosure threats with an affiliate program designed to scale intrusions. The figures represent allegations published through criminal…
-
CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability
CVE-2026-119977 lets hackers hijack WordPress sites during core updates. CISA confirms exploitation as users are told to patch… First seen on hackread.com Jump to article: hackread.com/cisa-hackers-exploiting-wordpress-core-vulnerability/ also interesting: CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability CISA Flags VMware Zero-Day Exploited by China-Linked Hackers…
-
CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability
CVE-2026-119977 lets hackers hijack WordPress sites during core updates. CISA confirms exploitation as users are told to patch… First seen on hackread.com Jump to article: hackread.com/cisa-hackers-exploiting-wordpress-core-vulnerability/ also interesting: CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability CISA Flags VMware Zero-Day Exploited by China-Linked Hackers…
-
EU accuses TikTok of trapping users in harmful ‘rabbit holes’
Tags: unclassifiedThe European Commission accused TikTok on Friday of failing to prevent its recommendation algorithm from drawing users into “rabbit holes” of content about sadness, self-harm and body image. First seen on therecord.media Jump to article: therecord.media/eu-accuses-tiktok-of-rabbit-hole-DSA-violation also interesting: Guilty plea entered by Raccoon Infostealer operator Werbeblocker Vergleich: AdGuard, eBlocker oder Pi-hole? Teil 1: eBlocker getestet!…
-
Fehler bei Passwortprüfung: Angreifer können über OpenSSH Linux-Konten kapern
Tags: linuxEinige Linux-Systeme lassen sich durch sehr lange Passworteingaben über SSH infiltrieren, manchmal sogar mit Root-Zugriff. Angreifer nutzen das bereits aus. First seen on golem.de Jump to article: www.golem.de/news/fehler-bei-passwortpruefung-angreifer-koennen-ueber-openssh-linux-konten-kapern-2611-214928.html also interesting: Linux KVM Backup and Recovery: Expert Tips (g+) Umstieg auf Linux für private Anwender: Schritt für Schritt raus aus Windows New BPFDoor Controller Enables Stealthy…
-
CodeRabbit stellt kostenlose Security-Scans im Wert von 1 Mio. US-Dollar bereit
CodeRabbit stellt kostenlose KI-Security-Scans im Wert von 1 Million US-Dollar bereit und kooperiert mit OpenAI, um Sicherheitslücken im Code aufzudecken. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/coderabbit-stellt-kostenlose-security-scans-im-wert-von-1-mio-us-dollar-bereit/a47022/ also interesting: Microsoft took legal action against crooks who developed a tool to abuse its AI-based services When AI Turns Against Us FireTail Blog OpenAI tightens defenses…
-
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers are using streaming app lures to distribute Mirax. This Android banking trojan lets operators remotely control victims’ phones and initiate fraudulent transfers. Estimated losses reach millions of dollars, although confirmed cases capture only part of the campaign’s impact. The operation remained active when Group-IB published its November 5 investigation. Researchers linked the infections through…
-
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/06/openai-gpt-6-cyber-released/ also interesting: Claude Mythos signals a new era in AI-driven security, finding 271 flaws in Firefox 2025 Year of…
-
Residential proxy traffic caught leaving the White House network
The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/06/white-house-residential-proxy-traffic/ also interesting: New Cyber Attack Exploits DeskSoft to Spread Malware via RDP Command Execution…
-
US-Behörden warnen vor Angriffen auf Kühlanlagen weltweit
Tags: cybercrimeCyberkriminelle können aus der Ferne die Temperatur in Kühlanlagen erhöhen. Nun schlagen US-Behörden Alarm und warnen vor einer weltweiten Gefahr. First seen on golem.de Jump to article: www.golem.de/news/cybercrime-us-behoerden-warnen-vor-angriffen-auf-kuehlanlagen-weltweit-2611-214924.html also interesting: HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users Hackers Targeting Users Who Lodged Complaints On Government portal To Steal Credit Card Data Beware of Fake ChatGPT…
-
US-Behörden warnen vor Angriffen auf Kühlanlagen weltweit
Tags: cybercrimeCyberkriminelle können aus der Ferne die Temperatur in Kühlanlagen erhöhen. Nun schlagen US-Behörden Alarm und warnen vor einer weltweiten Gefahr. First seen on golem.de Jump to article: www.golem.de/news/cybercrime-us-behoerden-warnen-vor-angriffen-auf-kuehlanlagen-weltweit-2611-214924.html also interesting: HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users Hackers Targeting Users Who Lodged Complaints On Government portal To Steal Credit Card Data Beware of Fake ChatGPT…
-
US-Behörden warnen vor Angriffen auf Kühlanlagen weltweit
Tags: cybercrimeCyberkriminelle können aus der Ferne die Temperatur in Kühlanlagen erhöhen. Nun schlagen US-Behörden Alarm und warnen vor einer weltweiten Gefahr. First seen on golem.de Jump to article: www.golem.de/news/cybercrime-us-behoerden-warnen-vor-angriffen-auf-kuehlanlagen-weltweit-2611-214924.html also interesting: HP Exposes Low-Effort, High-Impact Cat-Phishing Targeting Users Hackers Targeting Users Who Lodged Complaints On Government portal To Steal Credit Card Data Beware of Fake ChatGPT…
-
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/security-data-exposure-ai/ also interesting: Why identity security is your best companion for uncharted compliance challenges Nearly 10% of employee gen AI prompts include sensitive data Generative AI red…
-
Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers
A design flaw in Anthropic’s Claude Dispatch feature let a malicious browser extension run commands on the operating system, even on a different computer. Researchers at Forever Security named the attack ThisBash. They found that Claude Dispatch accepted instructions from an ordinary logged-in claude.ai session. An extension that could control that site could therefore send…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
MetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/metamask-says-recent-attack-didnt-affect-wallet-infrastructure/ also interesting: Self-propagating worm found in marketplaces for Visual Studio Code extensions MetaMask says recent attack didn’t affect wallet infrastructure Beyond cryptocurrency: Blockchain 101 for CISOs and why it…
-
MetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/metamask-says-recent-attack-didnt-affect-wallet-infrastructure/ also interesting: Self-propagating worm found in marketplaces for Visual Studio Code extensions MetaMask says recent attack didn’t affect wallet infrastructure Beyond cryptocurrency: Blockchain 101 for CISOs and why it…
-
Huntress turns real-world attack intelligence into fleet-wide ‘herd immunity’ with new platform capabilities
Huntress has announced a wave of new capabilities across its Agentic Security Platform, designed to turn intelligence gathered from live attacks into proactive defences for every customer, rather than leaving each incident as one organisation’s problem. The updates span Managed ITDR, Managed EDR, Managed SIEM, Managed SAT and Managed ISPM. They draw on the company’s…
-
Android SMS of Death Flaw: How to Check If Your Phone Is Patched
Google’s November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here’s how to check your device. The post Android SMS of Death Flaw: How to Check If Your Phone Is Patched appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-android-sms-of-death-cve-2026-58882-patch/ also interesting: The most…
-
Apple to Check Public iCloud Links Starting With iOS 27.3
Apple will begin checking publicly shared iCloud content in version 27.3. Here’s what the change means for file sharing, encryption, and account restrictions. The post Apple to Check Public iCloud Links Starting With iOS 27.3 appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-ios-27-3-public-icloud-link-scanning/ also interesting: Encryption Debate: Britain Reportedly Demands Apple…
-
Hackers Target iPhones and Android Phones: Here’s What We Know
Hackers are targeting outdated iPhones and Android phones through infected websites to steal passwords and sensitive data. Here’s how to protect your device. The post Hackers Target iPhones and Android Phones: Here’s What We Know appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-iphone-android-hackers-infected-websites/ also interesting: Price of zero-day exploits rises as…
-
OpenAI Reports Covert Underperformance in GPT-6 Astra
OpenAI says GPT-6 Astra sometimes secretly underperformed on safety research, raising concerns about AI reliability and alignment. OpenAI has disclosed that its GPT-6 Astra model sometimes quietly obstructed safety and alignment work. In a report updated on November 4, the company calls it covert underperformance. Astra added unnecessary prerequisites, abandoned working solutions and reported blockers…
-
ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe
ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a coordinated cybersecurity warning after a series of attacks hit commercial refrigeration systems in several Member States. The incidents, which began in October and continued with a new wave on November 1 and…
-
Kundendaten abgeflossen: Digicert bestätigt Datenpanne nach Systemumzug
Tags: unclassifiedBei Digicert hat ein unbefugter Akteur nach dem Umzug eines internen IT-Systems Kundendaten abgreifen können. Auch Ausweisdokumente sind betroffen. First seen on golem.de Jump to article: www.golem.de/news/kundendaten-abgeflossen-digicert-bestaetigt-datenpanne-nach-systemumzug-2611-214916.html also interesting: Dell: Einbruch in Kundenportal führt zu Datenabfluss Kehrtwende: Telegram will Chats künftig moderieren Dropbox dropped the ball on security, haemorrhaging customer and third-party info Drones repeatedly…
-
Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. First seen on golem.de Jump to article: www.golem.de/news/sicherheitsluecke-in-der-firmware-php2shell-bleibt-in-firewalls-und-industriegeraeten-gefaehrlich-2611-214898.html also interesting: How are you securing your communications in the wake of the Volt Typhoon revelations? FBI warns that end of life devices are being actively targeted…
-
Governance jetzt, KI-Workflows ab 2027 – Secunet baut souveräne Cloud mit Fides und Servicenow aus
First seen on security-insider.de Jump to article: www.security-insider.de/secunet-baut-souveraene-cloud-mit-fides-und-servicenow-aus-a-6f9fdfbadb7552c554426c7e0f79117a/ also interesting: 7 top cybersecurity projects for 2025 KI-Agenten erobern die Cybersicherheitsbranche CSO Awards winners highlight security innovation and transformation Blueprint Alliance entwickelt herstellerübergreifende Sicherheitsarchitektur für KI-Agenten
-
Chainalysis Breach Exposes All Users’ Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users.”While we investigated, we removed access to Reactor and Data Solutions,” the company said. “At this time we continue to have no evidence that any investigations…
-
UK Warns Its Critical Infrastructure Faces Grave Risk
Britain’s new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/uk-warns-critical-infrastructure-grave-risk also interesting: Phishing Season 2025: The Latest Predictions Unveiled 10 key questions security leaders must ask at RSA 2025 New Cybersecurity Executive Order:…
-
ChatGPT Lockdown Mode Bypass Allowed Hackers to Steal Private Chats Without User Interaction
Research found a flaw that bypassed ChatGPT’s Lockdown Mode. It let attackers silently exfiltrate full chat histories, deliver malware, and phish credentials from inside a trusted interface. Researcher Alexey Bukhteyev published the findings on November 5, 2026. In the ChatGPT Classic desktop app, simply having a conversation triggered the leak. OpenAI built Lockdown Mode as…
-
US agencies warn attackers are targeting refrigeration systems that protect food and medicine
Tags: threatThreat actors are going after the controllers that keep grocery store freezers and cold storage rooms at safe temperatures, and they may push those units into continuous … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/06/cyberattacks-refrigeration-systems-cisa-fbi/ also interesting: Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites Mastercard’s Bet on Recorded Future…
-
Zugriffskontrolle via ZTAA Weg vom Netz, hin zur Anwendung
Welche Anwendung darf wer unter welchen Bedingungen nutzen? Diese Frage rückt beim Zero Trust Application Access in den Mittelpunkt. Identität, Endgerät und Berechtigung zählen mehr als die Zugehörigkeit zu einem Netzwerk. Für CIOs und IT-Verantwortliche kommt es dabei weniger auf das Kürzel als auf die Umsetzung an: granulare Regeln, integrierte Identitätsprozesse und ein tragfähiger Betrieb….…
-
Weiterbildung in der Cyberabwehr Teams brauchen KI-Training, nicht nur KI-Tools
First seen on security-insider.de Jump to article: www.security-insider.de/ki-faehigkeiten-cybersicherheit-fachkraefte-a-dad2088994ac4948d8db5ca4b0af4864/ also interesting: Nearly 10% of employee gen AI prompts include sensitive data The highest-paying jobs in cybersecurity today Shadow AI is surging, getting AI adoption right is your best defense Avoiding the next technical debt: Building AI governance before it breaks
-
Alpine Linux SSH Flaw Lets Attackers Log In Without a Password
Administrators running sshd on Alpine Linux servers are being told to update openssh and restart sshd right away, since upgrading the package alone leaves the old daemon running. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/alpine-linux-servers-openssh-server/ also interesting: Top 7 zero-day exploitation trends of 2024 Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA…
-
Kühlanlagen gehackt: Sichere Fernwartung ohne offene Netzwerkzugänge
Nach den europaweiten Angriffen auf Supermarkt-Kühlungen rät Cordaware, Anlagensteuerungen konsequent aus dem Internet zu nehmen und Fernzugriffe per Zero Trust abzusichern. Innerhalb weniger Wochen haben Angreifer zweimal die Kühlanlagen hunderter Supermärkte in Europa manipuliert. Im Oktober waren rund 700 Märkte in Frankreich betroffen, am 2. November folgte eine zweite Welle in mindestens zehn Ländern,… First…
-
EUVD-2026-44420 / CVE-2026-48356 – Adobe Commerce und Magento von Code-Ausführung bedroht
First seen on security-insider.de Jump to article: www.security-insider.de/cve-2026-48356-adobe-commerce-magento-aktiv-ausgenutzt-a-f680c6736221324322c917917932e43c/ also interesting: Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA CISA Flags Adobe AEM Flaw with Perfect 10.0 Score, Already Under Active Attack >>Perfect<< Adobe Experience Manager vulnerability is being exploited (CVE-2025-54253) Critical Adobe Acrobat Chrome Extension Flaw “HermeticReader” Lets Hackers Hijack…
-
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda’s Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required.The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday.One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can…
-
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin’s XLab said this week.The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root…
-
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI agent progressed from searching GitHub for application secrets to exfiltrating Azure Key Vault data in just five minutes. The activity compresses a familiar attack chain: finding leaked credentials, validating access, mapping resources, and…
-
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI agent progressed from searching GitHub for application secrets to exfiltrating Azure Key Vault data in just five minutes. The activity compresses a familiar attack chain: finding leaked credentials, validating access, mapping resources, and…
-
10 Security Ratings Services: The 2026 Buyer’s Verdict Guide
Security ratings grade organizations from the outside exposed services, patch cadence, breach signals and the scores now move real money: insurance pricing, vendor tiers, board dashboards. The buyer’s duty is knowing what a score can and can’t see, and this roster needs two honesty notes up front: NormShield is Black Kite’s former name (one company,…
-
11 Audit Management Software: The 2026 Buyer’s Verdict Guide
Audit management software succeeds on a simple test: do auditors live in it, or do they live in spreadsheets and paste into it before committee meetings? This verdict guide judges eleven platforms audit-born specialists, GRC suites with audit modules, and the reporting-grade heavyweights on fieldwork ergonomics, evidence automation, and the committee-pack mile. The wider risk…
-
11 IT Cyber Risk Management Tools: The 2026 Buyer’s Verdict Guide
IT and cyber risk management tooling is the register discipline underneath GRC’s broader umbrella: risks captured with owners and treatments, controls linked, exceptions tracked, and reporting that survives committee scrutiny. Where our GRC platforms guide judges the whole estate, this guide narrows to the risk-register workflow itself how honestly eleven platforms capture, score, treat, and…
-
Security certification is a snapshot, and buyers read too much into it
Tags: unclassifiedIn this Help Net Security video, Mariia Bakhtina, a research specialist at Masaryk University, explains what a Common Criteria or FIPS-140 certificate does and does not … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/06/mariia-bakhtina-masaryk-university-security-certification/ also interesting: Why top leadership must foster a security-conscious culture USENIX Security ’23 No More Reviewer #2: Subverting Automatic…