Tech · Culture · Fiction
Article Ahsay's patched flaws still dropped miners October 7
Two unpatched AhsayCBS flaws, still present in 10.3.4, are being chained to deploy webshells and an XMRig miner; Huntress saw the activity on October 7.
Bricksforge writes attacker PHP where the client asks
A CVSS 10.0 unauthenticated RCE in the Bricksforge WordPress plugin (CVE-2026-85097) is under active exploitation. Update to 4.0.1 and audit uploads.
AgentCore and the Metadata Problem
Zenity's AgentCorruption research shows how one prompt to an AWS Bedrock AgentCore agent could expose credentials and widen blast radius.
iVerify discloses new DarkSword iOS variant
P7 DarkSword adds iOS wallet theft, keychain extraction, and remote command execution through SpringBoard-injected implants.
LMCache Exposes Remote Code Execution
CVE-2026-105192 lets unauthenticated attackers run code on exposed LMCache multiprocess servers, with no patched release available.
OpenAI Safety Firings Raise Control Questions
OpenAI's firing of three safety researchers shows how unclear research-handling rules can weaken AI safety review and accountability.
86,644 FortiGate boxes still take the old password
The FBI says FortiBleed is still active, using 86,644 Fortinet credentials harvested months ago to plant admin accounts and feed ransomware crews.
The Wire — latest
All →- Ahold Delhaize Hit by Cyberattack, Temporarily Shuts Down Systems
- AI Coding Tools Boost Code Volume, Not Software Output
- AI-Powered CyberXero Campaign Steals 628,000 Ukrainian Records
- AI's Role in Job Displacement: A DevOps Engineer's Perspective
- Anthropic Halts Live AI Tests After Government Site Breaches
- AvisLoader Malware Evades Detection with Tox P2P Network
- Calculus with Julia: A Modern Teaching Approach
- Citroen Revives Iconic 2CV as Electric City Car
- Critical Bricksforge Flaw Under Active Exploitation
- Cyberattack Thaws French Supermarkets' Refrigerators
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.