RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Exploited Outlook flaw silently leaks NTLM hashes Article

Exploited Outlook flaw silently leaks NTLM hashes

Microsoft's 1,259-CVE Patch Tuesday includes CVE-2026-124194, an actively exploited Moderate Outlook flaw that can leak a user's NTLMv2 hash.
SignDrop turns Microsoft's October CLFS fix into SYSTEM escalation Article

SignDrop turns Microsoft's October CLFS fix into SYSTEM escalation

Turla's malware turns Exchange into its own C2 Article

Turla's malware turns Exchange into its own C2

4EverAble2Shell chain plants Monero miners on 21 N-central servers
Article N-able N-central

4EverAble2Shell chain plants Monero miners on 21 N-central servers

Attackers chained Apache Axis CVE-2026-90436 with an N-central privilege escalation to plant XMRig miners on 21 servers; 19 already ran Hotfix 2.

 Attackers mine Monero on N-central Hotfix 2 servers
Article n-able-n-central

Attackers mine Monero on N-central Hotfix 2 servers

N-able N-central's 4EverAble2Shell zero-day was exploited within hours of PoC release, mining Monero on 21 servers, 19 on the latest Hotfix 2 build.

 CISA gives agencies until November 24 to patch Outlook flaw
Article patch-tuesday

CISA gives agencies until November 24 to patch Outlook flaw

Microsoft's November patch batch covers 1,259 flaws, including CVE-2026-124194, an actively exploited Moderate-rated Outlook spoofing bug now in CISA's KEV.

 Apache 2.4.71 closes an HTTP/2 remote code execution race
Article apache-http-server

Apache 2.4.71 closes an HTTP/2 remote code execution race

CVE-2026-119618 is a critical HTTP/2 race condition in Apache mod_http2 that allows unauthenticated remote code execution; patch to 2.4.71 or disable HTTP/2.

 Claude Office Party Enables Linux Code Execution
Article Claude Code

Claude Office Party Enables Linux Code Execution

Claude's Office Party flaw lets a planted shared library execute during Linux document processing through an unsafe LD_PRELOAD fallback.

 N-able pulls N-central offline after zero-day dump
Article N-able

N-able pulls N-central offline after zero-day dump

N-able took hosted N-central offline across all regions a day after researcher Sean Bales disclosed 33 zero-day flaws; HF2 now patches seven CVEs.
All articles → All stories →

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.