Tech · Culture · Fiction
Article Attackers weaponize Siemens IoT2050 flaw to deploy botnet
Attackers are weaponizing CVE-2026-58115, a CVSS 10.0 missing-auth flaw in Node-RED on Siemens IoT2050 devices, to deploy Linux bots and persistent backdoors.
Ubuntu still has no patch for CVSS 9.8 kernel flaw
CVE-2026-98432 is a CVSS 9.8 remote root flaw in the Linux kernel's TCP code. Debian patched it October 16; Ubuntu still has no fix two weeks on.
Linux TCP Flaw Exposes MPTCP Listeners
CVE-2026-98432 is an IPv4 TCP use-after-free with a demonstrated root exploit against Linux servers using MPTCP listeners.
LXD Flaw Enables Keyless Client Impersonation
CVE-2026-112816 let remote attackers impersonate trusted LXD and MicroCloud clients without possessing their private keys.
Northflank Breach Exposes AI API Keys
Northflank warned customers to rotate stored secrets after a breach led to reported unauthorized use of AI API keys.
A ChatGPT share link leaked your private conversations
Researchers turned a public ChatGPT share link into JavaScript running as the victim, reading private conversations through authenticated APIs.
Attackers probed Oracle EBS on October 27
Attackers are probing Oracle EBS CVE-2026-101767, an unauthenticated SQL injection in the TCF servlet that chains to RCE, days after Oracle's patch.
The Wire — latest
All →- $3.7T Chip Rout Intensifies as Intel Leads Decline
- AI Automates Alert Triage: SOCs Shift to Engineering by 2028
- AI Forces Mathematics to Reconsider What Gives Work Its Worth
- AI Uncovers Legal System Vulnerabilities
- Anthropic's $17B Q3 Revenue Masks Slowing Growth, $895B Infrastructure Bet
- Anthropic's IPO Hides Unsustainable $900 Billion in Commitments
- Astra Weight Claims Conflate Distinct Techniques
- Attackers Hijack LLM Services to Generate $1M in Fraudulent Cloud Charges
- Barracuda Patches Critical Root Access Flaws in Email Gateways
- Binance's $6.43B Theft: Supply Chain Attack, Fake Interviews, AI Misuse
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.