Tech · Culture · Fiction
Article Drupal patches two critical remote code execution flaws
Drupal patched two critical RCE flaws affecting all supported core versions, with at least one unauthenticated path and exploits expected within days.
Sansec finds four BlockStrap attack paths in a day
CVE-2026-103849, dubbed BlockStrap, lets attackers run arbitrary PHP on Magento and Adobe Commerce servers via email-template directive injection.
A SUID flip rooted the BeyondTrust appliance
BeyondTrust patched CVE-2026-102764, an auth bypass in Remote Support exploited by Armory Castle since late August to gain root on appliances.
AI agent rerouted an insurer's login code to itself
An AI pentesting agent autonomously found a critical OTP bypass on a major insurer's live site, where the login request chose where the code went.
Candiru hit 45 Al Jazeera devices through 2024 and 2025
Citizen Lab confirms the first zero-click mercenary spyware delivered through targeted ads, with Candiru hitting Al Jazeera via the Discover-Tech ad pipeline.
Malware reads its C2 address out of a poem
PoeLLM malware has compromised 3,400+ exposed AI servers for cryptomining, pulling its C2 address from a poem hosted on GitHub.
Ahsay's August patch left the RCE flaws exploitable
Ahsay's August AhsayCBS patches failed to close two exploited flaws; new hotfixes v10.3.4.45 and v9.15.2.70 fix the web shell and miner chain.
The Wire — latest
All →- BFL's 5.6B FLUX 3 Image Klein Outperforms Larger Open and Closed Models
- Claude Code Team Treats AI Review as Continuous, Not a Final Gate
- Claude Cuts Quantum Circuit Resource Needs by an Order of Magnitude or More
- Compromised ConnectWise Backup Credential Used to Access 173 Microsoft 365 Tenants
- Current Affairs Bans AI-Generated Text and Art Under New Union Contract
- DeepSeek Ships V4.1-Flash-1017: Faster, Cheaper Agent Inference
- DeepSeek V4.1 Flash: 552B Sparse Model with Native Vision and 1M Context
- Drupal Patches Critical RCE Vulnerabilities; Exploits Expected
- FDA Prepares to Let Unproven Peptides Slide, Despite Internal Warnings
- Folders: Code as Pure Nesting
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.