Tech · Culture · Fiction
Article Ahsay's August patch left the RCE flaws exploitable
Ahsay's August AhsayCBS patches failed to close two exploited flaws; new hotfixes v10.3.4.45 and v9.15.2.70 fix the web shell and miner chain.
Langflow pipes commands into bash
Langflow CVE-2026-105740 lets any authenticated user run shell commands via MCP stdio config and is under active exploitation. How it works and what to do.
A patched Ivanti appliance on 22.8R2.4 fell to three zero-days
An attacker chained three Ivanti Connect Secure zero-days to root on a fully patched appliance. Two are fixed, one still pending, and the ICT misses it.
An email attachment hands the sender root on Cisco's gateway
Cisco patched CVE-2026-76519, an actively exploited path traversal in Secure Email Gateway AMP that gives unauthenticated attackers root via an email attachment.
OpenAI's September 30 sweep found a hidden recorder
Prosecutors charge an OpenAI engineer with planting an encrypted audio recorder in an executive conference room. What defenders can take from it.
Safe Rust prints freed stack memory
Rust issue #164250 exposes an 11-year borrow-checker unsoundness: covariant field assignment lets a malicious Drop read freed stack memory in safe Rust.
From a color-picker image to Atlassian's credential file
CVE-2026-21589, a CVSS 9.3 file-access flaw in Atlassian Data Center, drew exploitation attempts two hours after watchTowr published technical details.
The Wire — latest
All →- 95 Arrested in Global CSAM Crackdown
- AhsayCBS Releases Fixes for Exploited Web Shell, Crypto-Miner Flaws
- AI Builds Spot-the-Difference Tree Game in 3 Hours
- AI Gauges Cryptanalysis Effort on Public-Key Algorithms
- AI Mass Decompilation of Games Sparks Opportunity and Concern
- AI vs. Human Pentesting: Strengths and Weaknesses
- Anthropic Accused of Plagiarizing Mononoke's Source Control Tech
- Anthropic Patches Silent Zero-Click 'SneakPeek' Flaw in Claude Code Desktop
- DEsk: Linux Wayland Desktop with Skeuomorphic Design
- Epic's AI-assisted Launcher claims speed edge over Steam
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.