RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Apache 2.4.71 closes an HTTP/2 remote code execution race Article

Apache 2.4.71 closes an HTTP/2 remote code execution race

CVE-2026-119618 is a critical HTTP/2 race condition in Apache mod_http2 that allows unauthenticated remote code execution; patch to 2.4.71 or disable HTTP/2.

Red Hat discloses critical signing-key flaw in Quay
Article Red Hat Quay

Red Hat discloses critical signing-key flaw in Quay

Two critical Red Hat Quay flaws let attackers plant signing keys and steal robot tokens to read and overwrite private container images.

Anthropic's Vulnerability Queue Keeps Growing
Article AI security

Anthropic's Vulnerability Queue Keeps Growing

Anthropic's Glasswing data shows AI vulnerability discovery outpacing validation, disclosure, and remediation capacity.

Backdoor hides in fake Fscan tool
Article supply-chain

Backdoor hides in fake Fscan tool

A two-year GitHub campaign hides malware in fake security tools, compromising 2,000+ Windows machines with an Electron loader, AsyncRAT, and an infostealer.

N-able pulls N-central offline after November 8 zero-day dump
Article N-able

N-able pulls N-central offline after November 8 zero-day dump

N-able took N-central offline worldwide after researcher Sean Bales published 30-plus zero-days with working exploits and no advance notice.

Windows 10 Update Fixes Exploited Flaw
Article Windows 10

Windows 10 Update Fixes Exploited Flaw

Windows 10 KB5131096 delivers November 2026 security fixes and repairs PowerShell, USB audio, printing, and Remote Desktop issues.

APT29 poisoned a Ukrainian analytics script
Article APT29

APT29 poisoned a Ukrainian analytics script

APT29 injected device-fingerprinting code into Ukrainian analytics firm Plerdy's script to serve iOS and Android n-day exploit chains to unpatched phones.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.