Tech · Culture · Fiction
Article Linux TCP Flaw Exposes MPTCP Listeners
CVE-2026-98432 is an IPv4 TCP use-after-free with a demonstrated root exploit against Linux servers using MPTCP listeners.
A ChatGPT share link leaked your private conversations
Researchers turned a public ChatGPT share link into JavaScript running as the victim, reading private conversations through authenticated APIs.
Attackers probed Oracle EBS on October 27
Attackers are probing Oracle EBS CVE-2026-101767, an unauthenticated SQL injection in the TCF servlet that chains to RCE, days after Oracle's patch.
One POST read cross-tenant secrets
Five critical cross-tenant bugs in Azure API Connections let one tenant's requests reuse another tenant's stored backend credentials via Logic Apps.
SSH backdoor shipped in Cursor's Claude Code extension
Phorion found an SSH backdoor in Claude Code for VS Code 2.1.312 and 2.1.313 on the Cursor Marketplace. How the implant works and how to remove it.
Attackers walk straight through Drupal's checkout
Drupal is urging admins to patch CVE-2026-118539, a missing authorization flaw in Commerce Core that attackers are already exploiting in the wild.
KeyDrift steals Cisco SD-WAN keys via a 2023 zero-day
Cisco Talos found KeyDrift malware inside Catalyst SD-WAN controllers stealing AES-256 keys via CVE-2026-20127. What it takes, who runs it, and how to respond.
The Wire — latest
All →- AI Investment Shows No Profit Impact Outside Tech Sector
- Engineers Build Open-Source Answers to Expensive SaaS
- LLM Bug Discovery Delays PostgreSQL 19 Release
- LLM-Powered Infostealer VOLTA Automates Victim Valuation
- Nibnib: Extreme Speed Image Format for Embedded Displays
- Proof: Shared Observations Beat Scale for Vision-Language Alignment
- Stale Lock Files Block Python 3.15 Builds
- Workers Take Home Smallest Share of National Income Since 1947
- AI Cost Analysis of JavaScript Frameworks Explored
- Air-Gap Data Leak via RAM Radio Signals
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.