Tech · Culture · Fiction
Article 4EverAble2Shell chain plants Monero miners on 21 N-central servers
Attackers chained Apache Axis CVE-2026-90436 with an N-central privilege escalation to plant XMRig miners on 21 servers; 19 already ran Hotfix 2.
Apache 2.4.71 closes an HTTP/2 remote code execution race
CVE-2026-119618 is a critical HTTP/2 race condition in Apache mod_http2 that allows unauthenticated remote code execution; patch to 2.4.71 or disable HTTP/2.
Claude Office Party Enables Linux Code Execution
Claude's Office Party flaw lets a planted shared library execute during Linux document processing through an unsafe LD_PRELOAD fallback.
N-able pulls N-central offline after zero-day dump
N-able took hosted N-central offline across all regions a day after researcher Sean Bales disclosed 33 zero-day flaws; HF2 now patches seven CVEs.
Red Hat discloses critical signing-key flaw in Quay
Two critical Red Hat Quay flaws let attackers plant signing keys and steal robot tokens to read and overwrite private container images.
Anthropic's Vulnerability Queue Keeps Growing
Anthropic's Glasswing data shows AI vulnerability discovery outpacing validation, disclosure, and remediation capacity.
Backdoor hides in fake Fscan tool
A two-year GitHub campaign hides malware in fake security tools, compromising 2,000+ Windows machines with an Electron loader, AsyncRAT, and an infostealer.
The Wire — latest
All →- $11.4M NVIDIA Shipment Missing from California Transit
- Active Exploitation of N-able Flaws Plants Miners on 21 Servers
- AgentRun Cuts Agent Costs by Learning Repeated Tasks
- AI Decodes Gödel's Hidden Theorems from 1940s Notebooks
- AMD SEV-SNP VMs Fall to Mior and Skyfall Attacks
- App Review Pipeline Collapses as AI-Generated Apps Flood iOS Store
- Apple Unifies LLM Access With Foundation Models Framework
- ArcticRAT Android Malware Now Uses AI to Profile Victim Finances
- Beyond the Kill Switch: How to Actually Stop an AI Agent
- Binance's $6.34B Breach Exploited Developer Compromise and EIP-7702 Flaw
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.