News
Elsewhere on the web — articles matching what I follow, pulled from RSS feeds and filtered by keyword. Newest first. Subscribe »
- ~nist it 6th NIST Quantum Matters in Material Sciences (QMMS) Workshop The 6th Quantum Matters in Materials Science (QMMS) workshop organized by the National Institute of Standards and Technology (NIST) will be held as an in-person
- ~nist it Super Intelligence in the Fire Service An interactive workshop discussing the use of super intelligence in the fire service will be hosted, on-site, at the National Institute of Standards and Technol
- ~zerohedge Futures Slide As AI Reckoning Claims Amazon, Intel; Oil Jumps On Hormuz Tanker Hits Futures Slide As AI Reckoning Claims Amazon, Intel; Oil Jumps On Hormuz Tanker Hits US futures slide with Nasdaq futures tumbling more than 2%, as the AI reckon
- ~vuldb recent CVE-2026-119545 | Forgejo up to 15.0.11/16.0.7/17.0.1 OpenID Login openid.go server-side request forgery A vulnerability was found in Forgejo up to 15.0.11/16.0.7/17.0.1. It has been declared as problematic. The affected element is an unknown function of the file m
- ~zerohedge Adam Carolla To The Atlantic: "F*ck Off And Eat Sh*t" Adam Carolla To The Atlantic: "F*ck Off And Eat Sh*t" Comedian Adam Carolla told The Atlantic to "f*ck off" and "eat sh*t" over its call for a pandemic "amnesty
- ~vuldb recent CVE-2026-110971 | Zakład Ubezpieczeń Społecznych Płatnik up to 10.02.002 encoding error A vulnerability was found in Zakład Ubezpieczeń Społecznych Płatnik up to 10.02.002. It has been classified as critical. Impacted is an unknown function. This m
- ~kernel.org 5.15.224: longterm Version:5.15.224 (longterm) Released:2026-10-30 Source:linux-5.15.224.tar.xz PGP Signature:linux-5.15.224.tar.sign Patch:full (incremental) ChangeLog:ChangeLog-
- ~vuldb updates CVE-2026-114148 | Microsoft ASP.NET Core privileges management (WID-SEC-2026-4162) A vulnerability was found in Microsoft ASP.NET Core. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulatio
- ~thn Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH
- ~vuldb updates CVE-2024-13362 | Carousel Plugin on WordPress Parameter url cross site scripting A vulnerability, which was classified as problematic, has been found in Carousel Plugin on WordPress. This vulnerability affects unknown code of the component P
- ~thn Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118
- ~no agenda 1916 "The Final Episode" No Agenda Episode 1916 - "The Final Episode" The Final Episode Executive Producers: Sir Pursuit of Peace and Tranquility in the Lands of the Red Clay and the Ch
- ~tails Tails 7.16 Changes and updates Update Tor Browser to 16.0. Tor Browser 16.0 is based on Firefox 153 and inherits its redesigned settings. Update the Tor client to 0.4.9.15
- ~lifehacker Lifehacker Deals Live Blog: The Best Tech Sales, All in One Place Keep up with all of the best deals that Lifehacker publishes, including laptops, speakers, TVs, security cameras, and more.
- ~cisco sa Cisco Finesse Server-Side Request Forgery Vulnerability A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (S
- ~lifehacker These Sony ANC Headphones Are on Sale for $128 Right Now These headphones offer ANC, transparency mode, comfort, an amazing app, and great battery life.
- ~cisco sa Vulnerabilities in Node.js Affecting Cisco Products: October 2026 On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x
- ~zerodayinitiative ZDI-CAN-34288: Adobe A CVSS score 3.3 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N severity vulnerability discovered by 'Chris Anastasio @mufinnnnnnn' was reported to the affected vendor on:
- ~/. hardware Apple Announces Its First Touchscreen MacBook Pro Apple has unveiled its first touchscreen MacBook Pro, reversing a position the company held for more than 15 years that touchscreens were poorly suited for lapt
- ~portswigger Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026 Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programm
- ~/. hardware Ford's Most Affordable EV Will Offer Built-In Bidirectional Home Charging Ford's upcoming $28,350 Fathom electric truck will include a built-in inverter capable of supplying up to 10 kW of AC power to a home, bringing bidirectional ch
- ~nist cyber insight Design Tenets for Agent Identity Management Systems This is blog #2 in our series on agentic identity, authentication and authorization. Our other post can be found via Post #1. In our last blog post, we highligh
- ~no agenda 1915 "Off The Rails" No Agenda Episode 1915 - "Off The Rails" Off The Rails Executive Producers: Mahingus Silver Laura Hartman-Frizzell Dame Astrid and Sir Mark Bryan Taylor Joel Co
- ~metasploit Metasploit Wrap Up: Langflow, MongoDB, and More This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an
- ~matrix This Week in Matrix 2026-10-23 🔗Matrix Live S13E14 - Live from The Matrix Conference Hackathon 2026 Today's Matrix Live: https://youtube.com/watch?v=iGxbWGTUVic 🔗Dept of The Matrix Conference
- ~portswigger PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run
- ~tails Tails 7.15.1 This release is an emergency release to remove a compromised certificate authority. Changes and updates Update Tor Browser to 15.0.26, which fixes CVE-2026-1134
- ~research Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days Three days is the average time between a high-severity vulnerability becoming public and its exploitation, according to the latest Quarterly Threat Landscape Re
- ~gentoo GLSA 202610-02: PHP: Multiple Vulnerabilities Multiple vulnerabilities have been found in PHP, the worst of which could result in remote code execution.
- ~gentoo GLSA 202610-01: ca-certificates: Compromised Intermediate Certificate Authority A vulnerability has been discovered in ca-certificates where an intermediate Certificate Authority has been compromised.