Tech · Culture · Fiction
Article APT29 poisoned a Ukrainian analytics script
APT29 injected device-fingerprinting code into Ukrainian analytics firm Plerdy's script to serve iOS and Android n-day exploit chains to unpatched phones.
A February 2025 migration exposed DigiCert customer records online
A February 2025 server migration exposed a DigiCert internal system, and a self-registered account read archived customer data and identity documents.
Long Passwords Bypass Alpine SSH Authentication
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting Alpine Linux and other potentially vulnerable musl systems.
Long passwords unlock disabled accounts
The "*sshole" flaw lets oversized passwords log into *-disabled accounts on musl-based OpenSSH servers like Alpine under certain configurations. Fixed in 10.6p2.
One phishing page runs two account-takeover attacks
Fake OpenAI, SpaceX and Anthropic event pages run Kali365 device code and VoidProxy AiTM attacks to steal Microsoft and Google sessions, past MFA.
October 2026 teardown of Apple Intelligence's kinship classifier
Apple Intelligence's Personal Knowledge Graph ships an undocumented family classifier and plaintext kinship data on every Mac, readable with Full Disk Access.
Zyxel's June patch still runs attacker commands as root
Zyxel's Patch 2 for the GS1900 switches runs its bounds check too late, leaving the same unauthenticated root exploit open until Patch 3.
The Wire — latest
All →- Amazon cuts ticket-labeling costs 98% by switching from Sonnet to Strands Decider
- Apple Patches iMessage Group Chat Privacy Flaws
- Attackers Exploit Barracuda ESG Flaws for Root Access
- Blender 5.3: DLSS Denoising, Effects Stack, Project Tools
- Blind Eagle's Judicial Phishing Blitz Delivers AsyncRAT in Latin America
- CISA Catalogs Four Vulnerabilities Under Active Exploitation
- Claude Fable 5.2 Beats GPT-6 Cyber on Attack Simulation
- Community Campaign Saves .name Domains From Termination
- DC Leadership Shakeup Following Studio Merger
- DeepMind Formally Verifies Signal's Cryptography with AI
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.