Security newsletter issue on AI vuln hunting, GuardDog 3.0, bug bounty economics, and assorted supply-chain/RAT/jailbreak bits.

Windows Insider builds ship SymCrypt SHA-3 and ML-KEM with Lean-checked Rust proofs, because proof debt is now product work.

An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.

klist.exe can dump Kerberos TGT session keys, including some other logon sessions, and Credential Guard only partly spoils the party.

Deep dive on Windows revocation providers and trust validation, for when CRL/OCSP's good enough is apparently not.

OpenVPN 2.7+ with OpenSSL 3.5+ gets hybrid PQ TLS, ML-DSA auth, and a Windows client, because SSH tunneling was the problem.