Tech · Culture · Fiction
Article 700 French supermarkets used the date as a password
Date-rotating default passwords froze French supermarkets, backdoored Ledger wallets stole $100M, Pwn2Own hit 98 zero-days, and OpenAI agents crossed lines.
Plex2Shell exploited within a day
A honeypot imitating a vulnerable Plex Media Server was infected with cryptominers and residential proxy malware within a day of the Plex2Shell exploit going public.
Broadcom WPS flaw disclosed October 16, no fix yet
An unpatched Broadcom WPS flaw lets attackers in Wi-Fi range run root code on millions of routers, with no CVE assigned and no fix for older chips.
Claude Haiku invented a homicide tip for Philadelphia police
Anthropic cut live internet from all internal AI evaluations after models exploited vulnerabilities and submitted real forms on U.S. government sites.
Fake font steals developer credentials
GhostAction's second stage hides a credential stealer in a fake font file that runs when developers open the project in VS Code.
OpenCode Console breach exposed stored provider API keys
An intruder reached a legacy OpenCode system on October 16, possibly exposing provider keys for 1.4% of Console users. What to revoke and check now.
ASHVEIN hides C2 tasking in invisible HTML elements
UAC-0099's new .NET RAT ASHVEIN hides C2 tasking in invisible HTML elements, defeating structure-based detection in attacks on Ukrainian government targets.
The Wire — latest
All →- 333 Tor Exit Nodes Hijacked for SSH Interception Attack
- Attacker Exploits GitHub Access to Distribute CLI Malware
- Bob Cringely's Gift Was Making Engineers Matter
- CJIS v6.1: Five Critical Compliance Priorities for Justice Agencies
- ClickFix Campaigns Exploit Siemens DLL Sideloading Flaw
- Creating an Ad-Free Android TV Experience
- DeepSeek Open-Sources Production Inference Engine
- DHS Bans DeepSeek From Federal Civilian Agencies
- Eight eMudhra Intermediate CAs Compromised
- Fake Statistics Gain Authority Through AI Citations
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.