Tech · Culture · Fiction
Article October 2026 teardown of Apple Intelligence's kinship classifier
Apple Intelligence's Personal Knowledge Graph ships an undocumented family classifier and plaintext kinship data on every Mac, readable with Full Disk Access.
Vulnerable Windows Paint can pass scans as patched
The Paint fix for CVE-2026-83844 ships only through the Microsoft Store as build 11.2609.401.0, and the CVE record's lower version lets scanners miss it.
Malware ranks what you're worth
VOLTA-AUTODOXER is a Windows infostealer that uses Claude, Kimi, and Gemini via OpenRouter to rank a victim's stolen data by its monetization value.
62,969 exploit attempts hit WordPress days after patch
A WordPress Core RCE in the upgrade process drew 62,969 blocked attacks in 24 hours; patch to 7.1.4 to close the race window.
A ChatGPT link read your chats
A shared ChatGPT link could run attacker code in a victim's logged-in session and read private chats; OpenAI fixed the P1 flaw in eight days.
A crafted regex runs code on GitLab servers
CVE-2026-97229, a max-severity integer overflow in GitLab's CI/CD regex compiler, is exploited for unauthenticated RCE and is now in CISA's KEV.
Three moderate CVEs chain to root
An Ivanti Connect Secure auth bypass, file upload, and privilege escalation chain to unauthenticated root. Patch the combined release, not just one CVE.
The Wire — latest
All →- Archive Documents 356 Processor Die Photographs
- Datasette Stops Firefox From Prefetching Unnecessary Pages
- Developer Leaves Claude Code for Pi Over Feature Bloat
- Dirac's Nested Square Roots: Making Any Natural Number from Four 2s
- Fan Recreates Terry Pratchett's Study in Miniature
- GitHub Previews Redesigned Pull Request Page to Cut Scrolling
- 1,000+ Gift Card Scams Exploit Brand Trust in Subscription Trap
- $133M Attack on French Bank Through Service Provider
- Akrotiri: Bronze Age Settlement Frozen by Thera's Catastrophic Eruption
- Apple Blocks 100,000+ Words From iPhone Predictive Text
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.