Tech · Culture · Fiction
Article Apache 2.4.71 closes an HTTP/2 remote code execution race
CVE-2026-119618 is a critical HTTP/2 race condition in Apache mod_http2 that allows unauthenticated remote code execution; patch to 2.4.71 or disable HTTP/2.
Backdoor hides in fake Fscan tool
A two-year GitHub campaign hides malware in fake security tools, compromising 2,000+ Windows machines with an Electron loader, AsyncRAT, and an infostealer.
N-able pulls N-central offline after November 8 zero-day dump
N-able took N-central offline worldwide after researcher Sean Bales published 30-plus zero-days with working exploits and no advance notice.
Windows 10 Update Fixes Exploited Flaw
Windows 10 KB5131096 delivers November 2026 security fixes and repairs PowerShell, USB audio, printing, and Remote Desktop issues.
APT29 poisoned a Ukrainian analytics script
APT29 injected device-fingerprinting code into Ukrainian analytics firm Plerdy's script to serve iOS and Android n-day exploit chains to unpatched phones.
GT10 exploits sshole to take over Linux systems
The *sshole flaw lets unauthenticated attackers SSH into Linux systems running OpenSSH with musl; Greynoise reports GT10 intrusions and an AI-generated backdoor.
SSHole exploited within hours of its November 5 fix
SSHole (CVE-2026-123158) lets an oversized password log into musl-based OpenSSH with PAM off; plus trojanized updaters and AI on both sides of attacks.
The Wire — latest
All →- 4,837 Hijacked GitHub Accounts Used to Steal CI Secrets
- Anthropic Reveals Multi-Chip and Compute Multiplier Strategy
- Apple Support Community Closes November 20
- Attacker Deploys AI to Salvage Failed Retail Breach Campaign
- AWS Releases Official Emulator for Local Testing
- Baker Tilly Clients Exposed in Third-Party Vendor Breach
- China's Big Data Platform Targets Overseas Chinese Communities
- Critical HTTP/2 Vulnerability Fixed in Apache Server 2.4.71
- From PhD Project to Graphics Standard: The Utah Teapot
- GitHub Actions Lockfiles Prevent Supply Chain Attacks
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.