Skip to content
The Crash Log
AI & Tech Gone Off the Rails
Fund
Cover image for The Crash Log newsletter
Issue #003 · March 12, 2026

Confidence Is the Exploit

Malware disguised as routine maintenance, student testing in Australia crashes on Day 1, and Grammarly finds out real experts still have opinions.

EXEC

Clipboard Roulette, Now with Wallet Drain

A fake CleanMyMac website reportedly walked users into running malicious Terminal commands by disguising malware delivery as routine maintenance, which is a very efficient way to turn "I'm just cleaning up my Mac" into incident response week. Cybernews says the campaign used social engineering rather than a technical exploit chain, and Malwarebytes reported payload behavior tied to credential theft and crypto-wallet backdooring. (Source: Cybernews, Malwarebytes)

The point isn't sophistication; it's choreography. A user sees familiar branding, follows "helpful" instructions, and manually executes the attacker's code for them. TLDR's security roundup described it as a ClickFix-style flow that tricks users into pasting commands, which is less Hollywood hacking and more weaponized muscle memory. (Source: TLDR)

TIMEOUT

National Testing in Australia Delayed by Outage

Australia's NAPLAN testing day reportedly hit major technical disruptions, with delays, pauses, and an apology from ACARA leadership. The Guardian and 9News describe broad interruptions affecting students nationwide, while The Age characterized the opening day as operational chaos. (Source: Guardian, 9News, The Age)

Regional coverage also reported delayed starts and disruption across schools.

When a standardized test platform buckles on Day One, the fairness problem isn't theoretical: different cohorts effectively sit under different conditions, and trust in the score pipeline erodes in real time. (Source: The Leader)

ROLLBACK

Grammarly Tried "Expert Review," Then Reviewed the Backlash

Grammarly reportedly shut down its AI "Expert Review" feature after criticism from journalists and writing professionals, with multiple outlets documenting a retreat after negative reception. SFGATE cited a company response thanking critics for accountability, while other reports tied the reversal to wider trust concerns around AI-mediated authority. (Source: SFGATE, Futurism, siliconANGLE)

Stack Trace

Apple's "The Illusion of Thinking" paper landed like a subtweet at the entire reasoning-model economy, arguing performance shifts with problem complexity rather than magic cognition.

A critical Nginx UI bug (CVE-2026-27944) was reported as potentially exposing and decrypting backups without auth, because apparently "backup security" was interpreted as optional punctuation.

Mozilla says Anthropic red teaming found Firefox vulnerabilities fast, a nice reminder that even hardened codebases can still produce a surprise box of sharp objects.

Don't miss the next issue

Subscribe