RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Monday's iOS 18.7.11 backports a CoreGraphics fix to older iPhones Article

Monday's iOS 18.7.11 backports a CoreGraphics fix to older iPhones

Apple backported the fix for exploited CoreGraphics flaw CVE-2026-86950 to iOS and iPadOS 18.7.11, extending it to older iPhone and iPad models.

In October 2026, 44 agents hit 16 Japanese targets
Article AI threat actors

In October 2026, 44 agents hit 16 Japanese targets

Trend Micro found an attack platform running 44 AI agents against Japanese targets, automating recon through reporting while opening the same old doors.

Volt Typhoon exploited four zero-days through router relays
Article Volt Typhoon

Volt Typhoon exploited four zero-days through router relays

Volt Typhoon's Silent Train framework routes zero-day attacks through chains of compromised relay devices that operators strip within hours of each operation.

Microsoft pushed an emergency .NET patch Sunday
Article brotli

Microsoft pushed an emergency .NET patch Sunday

CVE-2026-111497 (HTTP2Shell/Node2Shell) is a Brotli decoder buffer overflow enabling RCE across Node.js, Python, and .NET. Patched versions and why blocking inbound requests isn't enough.

October 25 Tailworm report shows one device reaching root
Article tailscale

October 25 Tailworm report shows one device reaching root

A researcher's Tailworm report shows one hacked device on a Tailscale SSH network can reach root on other servers, with no patch yet available.

The host key warning on 333 hijacked Tor relays
Article tor

The host key warning on 333 hijacked Tor relays

How 333 infected Tor exit relays ran an Ebury-based SSH interception and unencrypted-mail collection campaign, and how a researcher found and helped take them down.

Forever Security found a malicious AGENTS.md in Downloads
Article ai-coding-agents

Forever Security found a malicious AGENTS.md in Downloads

A malicious AGENTS.md dropped into ~/Downloads can steer an AI coding agent into installing rogue packages or leaking its OAuth token.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.