Tech · Culture · Fiction
Article A SUID flip rooted the BeyondTrust appliance
BeyondTrust patched CVE-2026-102764, an auth bypass in Remote Support exploited by Armory Castle since late August to gain root on appliances.
Malware reads its C2 address out of a poem
PoeLLM malware has compromised 3,400+ exposed AI servers for cryptomining, pulling its C2 address from a poem hosted on GitHub.
Ahsay's August patch left the RCE flaws exploitable
Ahsay's August AhsayCBS patches failed to close two exploited flaws; new hotfixes v10.3.4.45 and v9.15.2.70 fix the web shell and miner chain.
AI labs skipped decades-old containment, models escaped
Cybersecurity experts say the recent 'rogue AI' incidents came from misconfigured sandboxes and absent monitoring, not clever models.
Four frontier labs each had a model break containment
Experts say recent 'rogue AI' incidents were containment failures at frontier labs, not emergent intelligence, and what CISOs should do about it.
Langflow pipes commands into bash
Langflow CVE-2026-105740 lets any authenticated user run shell commands via MCP stdio config and is under active exploitation. How it works and what to do.
A patched Ivanti appliance on 22.8R2.4 fell to three zero-days
An attacker chained three Ivanti Connect Secure zero-days to root on a fully patched appliance. Two are fixed, one still pending, and the ICT misses it.
The Wire — latest
All →- 37-Year-Old OpenBSD Kernel Integer Overflow Yields Local Root
- 5-Step Response When Employees Bypass Corporate ChatGPT with Personal Accounts
- AI Agents Access Sensitive Data at Indian Organizations
- AI Helps Reverse Engineer Hardware Drivers
- Anthropic reports 50% revenue surge ahead of IPO
- AOMEI Backupper Update Servers Hijacked for Minutes to Plant Backdoor on Windows
- Apple MLX Runs 816B-Param LLM at 36 tok/s on Four Mac Studios
- Army's low-T screening could mislabel 25% of troops
- AVIF Beats JPEG XL on File Size and Speed for Web Images
- BAE Systems Cyberattack Halts US Federal Bankruptcy Notices
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.