Tech · Culture · Fiction
Article A ChatGPT share link leaked your private conversations
Researchers turned a public ChatGPT share link into JavaScript running as the victim, reading private conversations through authenticated APIs.
SSH backdoor shipped in Cursor's Claude Code extension
Phorion found an SSH backdoor in Claude Code for VS Code 2.1.312 and 2.1.313 on the Cursor Marketplace. How the implant works and how to remove it.
Attackers walk straight through Drupal's checkout
Drupal is urging admins to patch CVE-2026-118539, a missing authorization flaw in Commerce Core that attackers are already exploiting in the wild.
KeyDrift steals Cisco SD-WAN keys via a 2023 zero-day
Cisco Talos found KeyDrift malware inside Catalyst SD-WAN controllers stealing AES-256 keys via CVE-2026-20127. What it takes, who runs it, and how to respond.
One WAP Push SMS crashes Android below the October 2026 patch
A malformed WAP Push SMS crashes com.android.phone on unpatched Android, dropping calls and looping reboots. How it works, recovery, and the October 2026 fix.
TeamViewer bug lets the host attack the viewer
TeamViewer's CVE-2026-111585 lets a controlled host crash or run code on the viewer connecting to it. Fixed in 15.83, with no workaround.
A 2.7 that silences logs
Warp Panda exploited VMware ESX logging flaw CVE-2026-41709 as a zero-day against U.S. law firms to cut audit-trail visibility. CISA added it to the KEV catalog.
The Wire — latest
All →- Beyond Silence: A Scholar's Duty to Share Security Flaws
- ChatGPT Vulnerability Let Attackers Hijack User Accounts
- Italian Farmer Revives Drought-Hardy Ancient Wheat from Attic Discovery
- It's Memory Latency That's Killing Your GROUP BY Queries
- The Hidden Asymmetries Between I/O Read and Write
- AI-Assisted Formal Verification: The End of 'Trust Me' Code
- Ancient Artifacts Surface as Norwegian Ice Patches Melt
- Android SMS of Death Vulnerability Remotely Crashes Phones Silently
- Backdoored Anthropic Extension Threatens 5,000 Cursor Users
- BeOS Now Runnable in Browser via Infinite Mac Project
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.