RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

A February 2025 migration exposed DigiCert customer records online Article

A February 2025 migration exposed DigiCert customer records online

A February 2025 server migration exposed a DigiCert internal system, and a self-registered account read archived customer data and identity documents.

One phishing page runs two account-takeover attacks
Article phishing

One phishing page runs two account-takeover attacks

Fake OpenAI, SpaceX and Anthropic event pages run Kali365 device code and VoidProxy AiTM attacks to steal Microsoft and Google sessions, past MFA.

October 2026 teardown of Apple Intelligence's kinship classifier
Article macOS

October 2026 teardown of Apple Intelligence's kinship classifier

Apple Intelligence's Personal Knowledge Graph ships an undocumented family classifier and plaintext kinship data on every Mac, readable with Full Disk Access.

Zyxel's June patch still runs attacker commands as root
Article zyxel

Zyxel's June patch still runs attacker commands as root

Zyxel's Patch 2 for the GS1900 switches runs its bounds check too late, leaving the same unauthenticated root exploit open until Patch 3.

On October 30, an AI tool breached WorkOS
Article workos

On October 30, an AI tool breached WorkOS

WorkOS says an attacker used the ARTEX AI offensive framework to breach an internal sales app and access CRM contacts and customer call summaries.

Vulnerable Windows Paint can pass scans as patched
Article windows-paint

Vulnerable Windows Paint can pass scans as patched

The Paint fix for CVE-2026-83844 ships only through the Microsoft Store as build 11.2609.401.0, and the CVE record's lower version lets scanners miss it.

Malware ranks what you're worth
Article infostealer

Malware ranks what you're worth

VOLTA-AUTODOXER is a Windows infostealer that uses Claude, Kimi, and Gemini via OpenRouter to rank a victim's stolen data by its monetization value.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.