The HarmSurface Newsletter
AI, cyber, and autonomy. Every Wednesday, under 7 minutes.
Machines act now. The advisories have not caught up.
1,877 items read. 24 worth your attention.
A free weekly newsletter for CISOs and the people who decide what to act on before the guidance even exists. The gap between 1,877 and 24 is the reading you no longer have to do.
Free · one click out · no sponsor chooses an item
5 issues · 12,642 items read · 112 published
Latest issue
05
Langflow makes it three AI platforms in three weeks
Attackers are using a Langflow flaw to lift OpenAI and AWS keys, SonicWall shipped two zero-days that chain to a 10.0, and OpenAI says its own model now crosses the critical cyber line.
How items are chosen, and what this publication will not do →
Why the ranking exists
3,521 of 5,208 vulnerabilities under observed exploitation are not in CISA's catalog. No federal listing, no remediation deadline, and nothing telling you which to do first.
Counted on 2 September 2026 from CISA's Known Exploited Vulnerabilities catalog and VulnCheck's community KEV.
Reductive · actionable · convergent
The list is ranked deterministically, capped on sourcing, and the cuts are published. Nothing here asks you to take the selection on faith.
Overview
The week in three lines, written before anything is ranked.
Editor's note
The one block in the first person, signed. What the coverage missed.
What mattered
Every item graded, scored, sourced, and followed by what it changes.
This week's focus
Three actions, each addressed to a named role and linked to its evidence.
What was cut
The omissions by name, with the reason each one did not run.
5 issues, 12,642 items read, 112 published. Every assessment change is on the record.
How these were chosen, and what this publication will not do: the commitments.
-
05 2 Sep 2026 1,877 → 24
Langflow makes it three AI platforms in three weeks
5 act now · 14 read this · 5 worth knowing
Attackers are using a Langflow flaw to lift OpenAI and AWS keys, SonicWall shipped two zero-days that chain to a 10.0, and OpenAI says its own model now crosses the critical cyber line.
Highest 65.1 of 100
-
04 26 Aug 2026 1,877 → 24
Second week, second machine learning platform
2 act now · 13 read this · 9 worth knowing
MLflow entered the exploited catalog seven days after Ray, a car's head unit took malware through its updater, and OpenAI answered for Hugging Face.
Highest 72.4 of 100
-
03 19 Aug 2026 2,777 → 24
The patch was the starting gun
7 act now · 13 read this · 4 worth knowing
Five flaws entered the exploited catalog in two days, SAP fell three days after its fix, and SharePoint waited only for a public proof of concept.
Highest 63.8 of 100
-
02 12 Aug 2026 4,568 → 24
The update was the attack
3 act now · 20 read this · 1 worth knowing
A worm through hundreds of npm packages, backdoored TrueConf installers, and poisoned WordPress plugins.
Highest 72.5 of 100
-
01 5 Aug 2026 1,543 → 16
The consoles were the way in
6 read this · 10 worth knowing
Consoles under attack: Cisco and N-able exploited, Arista reported, Check Point PoC'd; JFrog confirms a burned zero-day.
No act-now item that week
-
06 9 Sep 2026 In preparation
Reading now
Bands assigned on the morning it ships
The week is still being read. Nothing is drafted until the ranking closes on Tuesday night.
Not yet scored · Subscribe to get it →
What this publication will not do
- No sponsor chooses an item
- No item runs on one vendor's word alone
- No silent corrections
- No auto-posting, ever
- No selling or sharing your address
- No paid placement, in any strand
Read it your way
Full text in RSS, no truncation and no tracking pixels in the feed. Every issue is a plain page that prints cleanly.
Keep the newsletters you already read. This is the one that treats AI, autonomy, and cyber as a single surface, and spends its effort on deciding what you can safely ignore.
More signal, less noise
Most weeks more is cut than kept, and the cuts are the work. The point is not what this finds. It is what it leaves out.
Pragmatic defense
Every issue closes with one task each for the CISO, for Ops, and for Detection, specific enough to assign on Monday.
One surface, not three beats
AI security, autonomy, and classic cyber are usually filed separately. The seams between them are where organizations get caught out, so they are read here as one thing.
Under 7 minutes, every Wednesday.
That is the whole promise. Every issue is here in full; subscribing means the next one finds you on Wednesday.