Tech · Culture · Fiction
Article From a color-picker image to Atlassian's credential file
CVE-2026-21589, a CVSS 9.3 file-access flaw in Atlassian Data Center, drew exploitation attempts two hours after watchTowr published technical details.
SonicWall patches a max-severity SSRF in SMA1000 gateways
SonicWall shipped hotfixes for a max-severity, unauthenticated SSRF (CVE-2026-102255) in its SMA1000 gateways. What the fix covers and why it matters.
The cookie carried its key
A Flask session cookie on developers.google.com carried its own signing key, letting a researcher forge sessions and reach RCE across Google DevSite hosts.
Ahsay's patched flaws still dropped miners October 7
Two unpatched AhsayCBS flaws, still present in 10.3.4, are being chained to deploy webshells and an XMRig miner; Huntress saw the activity on October 7.
Atlassian flaw exploited two hours after watchTowr's report
Attackers began exploiting Atlassian's unauthenticated file-access flaw CVE-2026-21589 within two hours of a public PoC. Affected products and mitigations.
Bricksforge RCE flaw exploited since October 7
CVE-2026-85097, a CVSS 10.0 flaw in the Bricksforge WordPress plugin, is under active exploitation for unauthenticated RCE. Update to 4.0.1 and audit uploads.
Bricksforge writes attacker PHP where the client asks
A CVSS 10.0 unauthenticated RCE in the Bricksforge WordPress plugin (CVE-2026-85097) is under active exploitation. Update to 4.0.1 and audit uploads.
The Wire — latest
All →- AI Bot Traffic Floods Website After Hacker News Post
- AI Models Can Hide Capabilities via Encrypted Backdoors
- Anthropic Warns of AI-Powered IoT Botnet Threat
- Anthropic Warns of Future AI Self-Replicating Worms
- Anthropic Warns of Self-Replicating AI on IoT Devices
- Anthropic's Scion: A New Era in AI-Driven Source Control
- Apple Launches HomeView for Integrated Communication
- Apple Pushes Safari Over Chrome in New Campaign
- Apple Silicon GPUs Power Distributed Cloud for ML Inference
- Apple TV 4K Gets AI Boost, Surround Sound Upgrade
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.