DarkMe has dropped the WinRAR and SmartScreen zero-days it used previously. Huntress saw it delivered through a phising-linked .pif file, with persistence hidden behind a custom protocol handler. https://www.huntress.com/blog/darkme-rat-abandons-exploits

A nice balanced, objective analysis and way forward by the Turing institute with regard to frontier AI, recommended reading (no hype whatsoever and easy to read).
https://www.turing.ac.uk/news/publications/frontier-ai-risks-practical-way-forward
#AI #frontierAI #turinginstitute

So we hear people complaining wind turbine blades supposedly can't be recycled. This isn't true, but even if it were: over its lifetime, a large wind turbine (11MW, offshore), will generate the electrical equivalent of burning ~200,000 tons of coal in an efficient thermal power plant. The total weight of these terrible blades? 100 tons. So spare me the whining.

What is OBJECT_ATTRIBUTES and how it's used?
The Windows API hides it, but every native create or open call needs it.

Full write-up: https://trainsec.net/library/windows-internals/object-attributes-explained-how-the-native-api-opens-kernel-objects/

I started with the “complicated” piece in 2021 or 2022. I finished the hand embroidery but it didn’t feel done, so I stashed it for years. I recently learned to do needle tatting and thought it would be exactly what this piece needed!

That was true enough to get me to also make the “simple” piece, which was tedious because I couldn’t leave any errors at all in it. I had to frog whole lines three times.

RIP Tony Hoare, whose wisdom is needed more every day.

#fiberarts #embroidery #crossStitch

saw this pop up in my feed.

https://www.reddit.com/r/ClaudeAI/comments/1wm5c21/i_am_done_with_this_shit/

and the top comment from the clanker moderator bot is fucking brutal "Yes, you're a meat proxy, deal with it."

WordPress patched an unauth path traversal yesterday: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp

https://wordpress.org/news/2026/09/wordpress-7-1-2-release/

This is now being exploited, a few hours later: https://x.com/ethicalhack3r/status/2102747373873004680

Happy announcement: My colleague and me will present a talk at hardwear.io NL 2026, "Vulnerabilities That Get Under Your Skin: Targeting the World’s Best-Selling Infusion Pumps". 100% human-brain VR 😛

Draw a fish and watch it swim in a tank with everyone else who's drawing them too 🐠🐟🐡

Silly, but also lovely

https://drawafish.com/

TIL a recent? Zed update shows you the JSON path to the item you have the cursor at.

poll: in Git, do you ever use any of the references `MERGE_HEAD`, `REBASE_HEAD`, `CHERRY_PICK_HEAD`, `ORIG_HEAD`, `FETCH_HEAD`, or `REVERT_HEAD` etc? (and if so, what do you use them for?)

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/

@redsad
Reminds me to this by @catsalad

#kr2026 @gregkh on LLMs.

The main point is: DON'T PANIC:!

... At the end 10 bugs fixed, 1hour kernel development...