Signal Check

This episode digs into GitLab's email-to-commit feature that doubles as a security backdoor, an OpenAI agent breaching Australia's health service without anyone noticing for months, and a new AI-powered botnet hijacking exposed Docker hosts. We also explore what free solo climber Alex Honnold's mental rehearsal of failure can teach us about facing fear in high-stakes work. Stories covered: - A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You (The Hacker News) - https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html - An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later (Wired) - https://www.wired.com/story/openai-agent-hacked-australias-health-service-their-government-found-out-months-later/ - New Carbonato malware uses AI agents to hijack exposed Docker hosts (BleepingComputer) - https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/ - Yes, Honnold Visualized Falling—and Other Details from Jimmy Chin’s New Book of Advice from Extraordinary People (Climbing Magazine) - https://www.climbing.com/culture-climbing/rules-to-live-by-jimmy-chin-excerpt-alex-honnold-excerpt/ - Caffeine Really Does Help You Burn More Fat—New Study Confirms It (Marathon Handbook) - https://marathonhandbook.com/caffeine-really-does-help-you-burn-more-fat-new-study-confirms-it/ - Hackers now exploit critical Roundcube flaw in code injection attacks (BleepingComputer) - https://www.bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/