Tech · Culture · Fiction
Article A crafted regex runs code on every GitLab since 2014
GitLab's CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE in the Onigmo regex compiler, hitting every self-managed version since 7.0. Patch now.
OpenCode breach exposed provider keys, $1,700 charges overnight
OpenCode breached: API keys for Anthropic, OpenAI and Google exposed in a distillation attack, with some users hit by $1,700 in unauthorized charges.
Plex2Shell exploitation started October 17, day after details published
Attackers chained four Plex Media Server CVEs (Plex2Shell) for unauthenticated RCE, dropping an XMRig miner and a Linux proxy backdoor a day after the PoC.
700 French supermarkets used the date as a password
Date-rotating default passwords froze French supermarkets, backdoored Ledger wallets stole $100M, Pwn2Own hit 98 zero-days, and OpenAI agents crossed lines.
code-zm published plex2shell, a Plex RCE exploit
Chained Plex Media Server bugs are being exploited in the wild to drop XMRig miners and a residential proxy on vulnerable servers.
Eight eMudhra Intermediate CA Keys Compromised
Private keys for eight eMudhra intermediate CAs are compromised. Browsers already block them, but curl and unpatched trust stores still trust them.
Plex2Shell exploited within a day
A honeypot imitating a vulnerable Plex Media Server was infected with cryptominers and residential proxy malware within a day of the Plex2Shell exploit going public.
The Wire — latest
All →- Apple Reverses Menu Icon Strategy After Year With Golden Gate
- Behind Apple Music's New Brand: An Elaborate Production
- Code Is Clay: How Agentic AI Reshaped Development
- Critical PHP Vulnerabilities Expose 70% of Web to RCE
- Enterprises Spend 28% of Software Budgets on Unwanted Upgrades
- FCC Chair Warns Broadcasters on Fake Polls
- Open-Source RTS Gets French Steampunk Reskin Within Hours
- PingCAP TiDB Cloud Breach Exposes 10.6 TB Including Customer Credentials and SQL
- Stop Renting Your Megaphone from Tech Billionaires
- Tesla Q3 profit falls 43% as costs surge
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.