Tech · Culture · Fiction
Article GitLab regex flaw since 2014
CVE-2026-110264 is an unauthenticated CVSS 10.0 RCE in GitLab's Onigmo regex engine affecting every self-managed release since 7.0, with backported fixes.
SafePay routed 600 ransomware hits through Mullvad
CISA and partner agencies detail SafePay ransomware, which has hit 600+ critical infrastructure orgs since August 2024, plus how to defend against it.
Zeabur breach exposes 3.22 million environment-variable records
A practitioner-focused method for separating systemic security failures from routine breach-cycle operations.
A crafted regex runs code on every GitLab since 2014
GitLab's CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE in the Onigmo regex compiler, hitting every self-managed version since 7.0. Patch now.
A malicious LiteLLM release stole credentials on install
LiteLLM 1.107.0 on PyPI shipped a credential stealer and an hourly backdoor that ran at every Python startup; the upstream GitHub source never had them.
Four chained Plex bugs reach unauthenticated RCE, now exploited
Four chained Plex Media Server bugs (Plex2Shell) enabling unauthenticated RCE are in CISA's KEV catalog, exploited to drop miners and proxy malware. Patch now.
Fewer than 100 Chinese characters aimed AI at 1,200 shops
A Chinese-speaking operator ran autonomous AI agents against 1,200+ websites, reaching 100+ companies at roughly $50 per successful breach.
The Wire — latest
All →- Agent Skills Donated to Independent Standards Body
- AI Finds Research Directions Communities Miss
- AI Tools Enable Mass Attacks for $25.46 Per Target
- Autonomous AI Agents Lack Protections Against Manipulation
- Bill C-22 Would Mandate Encryption Backdoors and Data Retention
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Systems Missing Revocations
- Caribbean's 48-Hour Problem: Audits Can't Keep Up
- Cyber Insurers Turn Active Defenders as Threats Accelerate
- Dessa: Speech-Only AI Learns to Converse Without Text
- Disney Hikes Prices While Expanding Ads to Premium Tier
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.