Tech · Culture · Fiction
Article CISA flags exploited GitLab and Cisco flaws
CISA added a CVSS 10.0 GitLab RCE and a Cisco ASA/FTD firewall DoS to its KEV catalog after active exploitation, with a November 1 patch deadline.
Unreleased Claude built five working exploits, all now patched
An unreleased Claude model chained bugs into five working exploits across Chrome, Safari, Android, Windows, and Linux; all vendors have since patched.
Attackers weaponize Siemens IoT2050 flaw to deploy botnet
Attackers are weaponizing CVE-2026-58115, a CVSS 10.0 missing-auth flaw in Node-RED on Siemens IoT2050 devices, to deploy Linux bots and persistent backdoors.
Barracuda patches two chainable root flaws in email gateways
Barracuda patched two ESG flaws, CVE-2026-116606 and CVE-2026-111560, that chain to root access; exploitation requires admin-interface access, so patch and lock it down.
CryptoPayment Gateway pulled in August, still no patch
CVE-2026-81648 is a CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin, under active exploitation with no patch; remove it and rotate wallet keys.
KeyDrift malware steals Cisco SD-WAN encryption keys
Cisco Talos details KeyDrift, malware that used the CVSS 10.0 CVE-2026-20127 flaw to copy SD-WAN encryption keys from compromised Catalyst controllers.
Ubuntu still has no patch for CVSS 9.8 kernel flaw
CVE-2026-98432 is a CVSS 9.8 remote root flaw in the Linux kernel's TCP code. Debian patched it October 16; Ubuntu still has no fix two weeks on.
The Wire — latest
All →- 69GB Breach Exposes Philippine Migrant Worker Records
- AI Agents Write Code Now. Here's What We Lost.
- Antimony: Graph-Based CAD from Lisp Machine Philosophy
- C++26 DIS Vote Fails, First Rejection in C++ History
- Figma Trains Specialized Model to Speed Up Design Editing
- Google Patches Critical Android RCE and SMS Flaws
- Japan's Jimi Halloween Celebrates the Mundane and Awkward
- Kitty 0.50: Docked Windows and Session Restoration
- Mathematical Primer Maps Connections Across Generative AI Models
- Nvidia Open-Sources Auto-Ontology to Boost AI Agent Accuracy
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.