Verizon Outage, SQL Server Vulnerabilities, Modular DS Admin ByPass, Lessons for Security Issues, Bluetooth Earbuds.

If you enjoy our newsletter, please consider to be a paid subscriber to help us keep more news and updates coming out.

Notice: The Book Report Q4, 2025 is available! Download here.

Highlights

• Verizon Outage.

• SQL Server Vulnerabilities.

• Modular DS Admin ByPass.

• Lessons for Security Issues.

• Bluetooth Earbuds.

---

Deep Dive

Verizon Outage: Software Issue BleepingComputer

• No cyberattack was involved.

• Nationwide disruption started January 14.

• Many phones entered SOS mode.

• Affected 911 emergency call access.

• Service restored late that evening.

• Impacted users should restart devices.

• Offering $20 credit to customers.

SQL Server Vulnerability CyberSecurityNews

• CVE-2026-20803 allows privilege elevation.

• Affects SQL Server 2022, 2025.

• Critical functions lack proper authentication.

• CVSS severity score is 7.2.

• Enables remote memory dumping access.

• Apply the latest security patches immediately.

Modular DS Admin Bypass EsecurityPlan

• Vulnerability grants unauthenticated admin access.

• Affects 40,000 WordPress websites.

• Attackers bypass authentication via API.

• Active exploitation is currently occurring.

• Update Modular DS to 2.5.2.

• Audit accounts for unauthorized users.

Lessons for Security Issues Arxiv

• The AI security landscape is complex.

• Studied GitHub and Hugging Face.

• Used distilBERT to classify discussions.

• Found 312,868 security-related posts.

• Identified 32 distinct security issues.

• Categorized issues into four themes.

• AI dependencies create security risks.

• Data issues often lack solutions.

• Provides evidence-based developer guidance.

Bluetooth Earbuds MalwareBytes

• Attacks hijack Google Fast Pair.

• No user interaction is required.

• Millions of devices are vulnerable.

• Affects Sony, Google, and more.

• Attackers can track user locations.

• Attackers can record microphone audio.

• Tracked as critical CVE-2025-36911.

• Only firmware updates fix this.

• Updating the phone is not enough.

• Check manufacturer apps for patches.

[Available] Book Report Q3, 2025

Available: Q2 2025 Report

Available: Q1 2025 Book Report

Teaser: Y2 GenAI Safety and Security

David Sachs & what's next

How David Sachs thinks about AI & Crypto

How upcoming Trump senior AI policy advisor thinks