Tech · Culture · Fiction
Article By October 23, one Brotli flaw reached every language
CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder that lets unauthenticated attackers run code via crafted compressed streams.
GitLab regex flaw since 2014
CVE-2026-110264 is an unauthenticated CVSS 10.0 RCE in GitLab's Onigmo regex engine affecting every self-managed release since 7.0, with backported fixes.
Malware rode in LiteLLM's installer
LiteLLM 1.107.0 shipped from a hacked release pipeline with malware that steals cloud, AI, and developer credentials before the app even runs.
Node.js patched a code-execution Brotli bug October 21
Imperva's Node2Shell runs code on a stock Node.js 24.22.0 image through a bundled Brotli decoder flaw, CVE-2026-111497. What is exposed and how to patch.
SafePay routed 600 ransomware hits through Mullvad
CISA and partner agencies detail SafePay ransomware, which has hit 600+ critical infrastructure orgs since August 2024, plus how to defend against it.
Zeabur breach exposes 3.22 million environment-variable records
A practitioner-focused method for separating systemic security failures from routine breach-cycle operations.
A crafted regex runs code on every GitLab since 2014
GitLab's CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE in the Onigmo regex compiler, hitting every self-managed version since 7.0. Patch now.
The Wire — latest
All →- 200K Creative Jobs Lost as AI Disrupts Digital Arts
- Brazil Court Orders Meta to Stop Biased Treatment of Election Candidates
- Modern Tools Make Ambitious Software Feasible
- New Neural Implant Adapts to Real-Time Brain Network States
- Self-Orchestrated Models Match Frontier Performance at Fraction of Cost
- AI Payoff Remains Confined to Tech Giants
- Amazon detects PHP2Shell exploitation four days before disclosure
- Astral Unifies Python Tools: uv Meets ty
- Battledrones Adds Four-Player Mode with Compass Rose Map
- BlackX Bootkit Bypasses Secure Boot Using Baton Drop Vulnerability
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.