Tech · Culture · Fiction
Article On October 30, an AI tool breached WorkOS
WorkOS says an attacker used the ARTEX AI offensive framework to breach an internal sales app and access CRM contacts and customer call summaries.
62,969 exploit attempts hit WordPress days after patch
A WordPress Core RCE in the upgrade process drew 62,969 blocked attacks in 24 hours; patch to 7.1.4 to close the race window.
A ChatGPT link read your chats
A shared ChatGPT link could run attacker code in a victim's logged-in session and read private chats; OpenAI fixed the P1 flaw in eight days.
A crafted regex runs code on GitLab servers
CVE-2026-97229, a max-severity integer overflow in GitLab's CI/CD regex compiler, is exploited for unauthenticated RCE and is now in CISA's KEV.
Three moderate CVEs chain to root
An Ivanti Connect Secure auth bypass, file upload, and privilege escalation chain to unauthenticated root. Patch the combined release, not just one CVE.
CISA flags exploited GitLab and Cisco flaws
CISA added a CVSS 10.0 GitLab RCE and a Cisco ASA/FTD firewall DoS to its KEV catalog after active exploitation, with a November 1 patch deadline.
CISA gives agencies until November 6 to patch WordPress
CISA added WordPress Core flaw CVE-2026-119977 to its KEV catalog after a TOCTOU race in the upgrade process enabled unauthenticated code execution.
The Wire — latest
All →- Akrotiri: Bronze Age Settlement Frozen by Thera's Catastrophic Eruption
- Awesome Lists Flooded with AI Spam and Neglect
- devvm: Sandbox VM Per Project for Developers and Coding Agents
- GitHub Redesigns Git Storage for Agent-Scale Workloads
- libghostty 1.0: Stable Terminal Emulation Library
- Man Survives Blade Through Eye and Brain With Remarkable Recovery
- Reverse-Proxy Payment Skimming: 820 Restaurant Clones Found
- Sodium-Ion Batteries Go Commercial as Cost Gap Narrows
- SonicWall Patches Active MFA Bypass Flaw in SSL-VPN
- Statistical Language Models: Responding to Chomsky
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.