Tech · Culture · Fiction
Article Broadcom WPS flaw disclosed October 16, no fix yet
An unpatched Broadcom WPS flaw lets attackers in Wi-Fi range run root code on millions of routers, with no CVE assigned and no fix for older chips.
OpenCode Console breach exposed stored provider API keys
An intruder reached a legacy OpenCode system on October 16, possibly exposing provider keys for 1.4% of Console users. What to revoke and check now.
ASHVEIN hides C2 tasking in invisible HTML elements
UAC-0099's new .NET RAT ASHVEIN hides C2 tasking in invisible HTML elements, defeating structure-based detection in attacks on Ukrainian government targets.
Deno team joins Cloudflare, Deploy shuts down
Cloudflare is acquiring the Deno team: the runtime gets one more year of security updates and Deno Deploy shuts down in six months.
GhostAction hit 318 repositories in 16 minutes
The GhostAction campaign injects fake security-audit workflows into GitHub repos to exfiltrate secrets from Actions settings and full git history.
SiteGuard's statistics feature runs attacker commands as root
CVE-2026-106931, a command injection in SiteGuard WAF's default statistics function, is under active exploitation for root or SYSTEM execution.
Drupal patches two critical remote code execution flaws
Drupal patched two critical RCE flaws affecting all supported core versions, with at least one unauthenticated path and exploits expected within days.
The Wire — latest
All →- Broadcom WPS Flaw Enables Unauthenticated Remote Root Access
- Bullhorn Takes Systems Offline Following Cyberattack
- CERN and Mistral Partner to Build Physics Foundation Model
- DeepSeek V4.1 Flash 1017: Fast, Competitive Open-Weight Model
- Dogs Recognize Sound-Shape Patterns Like Humans
- F5 Patches Critical NGINX Flaws That Enable Code Execution
- FDA Authorizes Organ-Chip Drug Tests, But Adoption Faces Culture Gap
- Federal Investigation Ties Security Executives to ShinyHunters Extortion Ring
- Free Pascal Compiler Adds Dynamic Package Support
- How Timothy Leary's Prank Became Cyberspace Legend
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.