Tech · Culture · Fiction
Article Attackers weaponize Siemens IoT2050 flaw to deploy botnet
Attackers are weaponizing CVE-2026-58115, a CVSS 10.0 missing-auth flaw in Node-RED on Siemens IoT2050 devices, to deploy Linux bots and persistent backdoors.
Ubuntu still has no patch for CVSS 9.8 kernel flaw
CVE-2026-98432 is a CVSS 9.8 remote root flaw in the Linux kernel's TCP code. Debian patched it October 16; Ubuntu still has no fix two weeks on.
Linux TCP Flaw Exposes MPTCP Listeners
CVE-2026-98432 is an IPv4 TCP use-after-free with a demonstrated root exploit against Linux servers using MPTCP listeners.
LXD Flaw Enables Keyless Client Impersonation
CVE-2026-112816 let remote attackers impersonate trusted LXD and MicroCloud clients without possessing their private keys.
Northflank Breach Exposes AI API Keys
Northflank warned customers to rotate stored secrets after a breach led to reported unauthorized use of AI API keys.
A ChatGPT share link leaked your private conversations
Researchers turned a public ChatGPT share link into JavaScript running as the victim, reading private conversations through authenticated APIs.
Attackers probed Oracle EBS on October 27
Attackers are probing Oracle EBS CVE-2026-101767, an unauthenticated SQL injection in the TCF servlet that chains to RCE, days after Oracle's patch.
The Wire — latest
All →- $3.7T Chip Rout Intensifies as Intel Leads Decline
- AI Forces Mathematics to Reconsider What Gives Work Its Worth
- Anthropic's $17B Q3 Revenue Masks Slowing Growth, $895B Infrastructure Bet
- Anthropic's IPO Hides Unsustainable $900 Billion in Commitments
- Census Bureau Officially Rebrands AI as 'Super Intelligence'
- CryptoPayment Gateway Plugin Flaw Under Active Exploitation
- Cyberattacks Warm Supermarket Refrigeration Systems Across Europe
- ERICI Reference Stack Breaks RISC-V Industrial Adoption Deadlock
- Google Dismantles Botnet Built Into 1.3M TV Set-Top Boxes
- Harvard Alumni Breach Exposes 850,000 Personal Records
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.