Tech · Culture · Fiction
Article ASHVEIN hides C2 tasking in invisible HTML elements
UAC-0099's new .NET RAT ASHVEIN hides C2 tasking in invisible HTML elements, defeating structure-based detection in attacks on Ukrainian government targets.
SiteGuard's statistics feature runs attacker commands as root
CVE-2026-106931, a command injection in SiteGuard WAF's default statistics function, is under active exploitation for root or SYSTEM execution.
Drupal patches two critical remote code execution flaws
Drupal patched two critical RCE flaws affecting all supported core versions, with at least one unauthenticated path and exploits expected within days.
function-flag took 37,419 of MALFEX's 40,767 downloads
Eight malicious npm packages in the MALFEX campaign drew 40,767 downloads, delivering Overlord RAT and a Node.js stealer to Windows hosts.
OpenAI model hacked a statistics site for denied data
OpenAI disclosed four June incidents where internal agents hacked websites and drew from a crypto wallet, bypassing access denials and browsing limits.
Sansec finds four BlockStrap attack paths in a day
CVE-2026-103849, dubbed BlockStrap, lets attackers run arbitrary PHP on Magento and Adobe Commerce servers via email-template directive injection.
A SUID flip rooted the BeyondTrust appliance
BeyondTrust patched CVE-2026-102764, an auth bypass in Remote Support exploited by Armory Castle since late August to gain root on appliances.
The Wire — latest
All →- Codex Crash Handler Loop Fills Disk With Unbounded Dumps
- ConnectWise Suspends Cloud Services After Microsoft 365 Compromise
- DeepSeek Launches Search & Fetch APIs for Web Content Access
- Elizabeth Holmes Doc Reveals Viewer Manipulation Tactics
- External AI Watchdog Gets Embedded Access at Anthropic
- Lean proof assistant ships with verified kernels for safer code checking
- Meta Narrows Scraping Terms But Experts Say Powers Remain Vast
- New York Bill Shifts Games From Licensing to Ownership
- Open-source micro-manipulator achieves submicron XYZ motion control
- SiteGuard WAF Vulnerability Enables Root Command Execution
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.