Recapping Day One of #Pwn2Own Ireland 2026. We saw some amazing research on display as we awarded $388,500 on the first day of the event. https://youtu.be/24dq8yVPd0c

[RSS] Chromium: WebGPU Security Technical Report

https://chromium.googlesource.com/chromium/src/+/main/docs/security/research/graphics/webgpu_technical_report.md

[RSS] Reversing Engineering a Captive Portal

https://binary.ninja/2026/10/06/reverse-engineering-airbnb-captive-portal.html

[RSS] Why does the compiler sometimes use ud2 and sometimes int 3 for code that shouldn't execute?

https://devblogs.microsoft.com/oldnewthing/20261006-00/?p=112757/

All vendors should have a plan for rapid remediation in the case of active exploitation.

Here’s some emergency fix strategies we’ve seen over the years:

https://projectzero.google/2026/10/emergency-patching.html

Good news or bad news depending on your POV: Usenet archives are suddenly easy to dig through, thanks to a new service. It’s built by a big data guy, and it’s packed with every awkward thing you ever wrote in a newsgroup in 1997.

My deep dive: https://tedium.co/2026/09/14/usenet-rewind-archive-revival-website/

new @tedium

@luc @infosecdj "There are only two hard things in Computer Science: cache invalidation and naming things."

@cR0w The fun part is the old product never really goes away so you can have the bugs of the old *and* the new one!

(And that's the Ciiiircle of Life)

You can always tell when vendors like Palo Alto are getting ready to announce a new product because they start making their existing shit even worse so they can say "that's fixed with this new product."

Sam Altman says he believes the world should accept “bad things” happening with AI in exchange for the benefits of the technology.

I've always disliked that I couldn't test Kerberos in CI easily and so I've written a #PowerShell module called Obol that can setup a KDC and configure the environment for the platform you are on https://github.com/jborean93/PowerShell-Obol. Uses @syfuhs.net's Kerberos.NET for the message parsing and encryption work.

[RSS] Inside the Windows I/O Manager : Deep dive into how read I/O requests are initialized.

https://winware31.blogspot.com/2026/10/inside-windows-io-manager-deep-dive.html

The upcoming IDA 9.5 adds 3️⃣ new decompilers and will deliver 🔟 platform updates.

The new decompilers:
◾ Android DEX
◾ Infineon TriCore
◾ Qualcomm Hexagon

👉 Read the full blog to see the rest of the updates: https://hex-rays.com/blog/ida-9.5-three-new-decompilers

The ICECUBE experiment is so sci-fi, it deserved the Nobel Prize in Physics.

Francis Halzen was all, Hey, let's drill 2500-meter holes in the ice at the literal South Pole and put neutrino detectors down there.

The experiment fills an entire cubic kilometer. That deep ice is so pure that there's nothing for the neutrinos to hit except water molecules, and such collisions produce other particles that then move faster than light speed in ice so produce a flash of Cherenkov radiation, which is what the detectors see. Seeing high-energy neutrinos for the first time is helping with a bunch of outstanding astrophysics questions.

Funded by US tax dollars...yeah, we used to build cool stuff.

(Illustration from the Nobel Prize website.)

https://www.nobelprize.org/prizes/physics/2026/press-release/

#physics #astrophysics #science

Why nothing looks cool anymore?

https://www.youtube.com/watch?v=HgjXjPP_p3s

I've been following this guy for a while now, but this turned out exceptionally good and important! I won't spoil the conclusion, you should watch it.

(And the next one will be about Flock cameras!)

Happy CSAM for those who celebrate!

Disclosing Branch Target Reuse (BTR): speculative execute-after-free in JIT engines. Code gets freed, but branch predictions survive. BTR exploits this mismatch to mount practical Spectre-v2 attacks (cBPF /etc/shadow exploit demo below). Details at: https://vusec.net/projects/btr

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/

A good friend of mine just posted a YouTube video breaking down all the discrepancies with the pod race from Star Wars Episode I. It's a fantastic deep dive with cited research, exploring multiple books and interviews on the topic. He even includes a custom made Blender recreation, all done without so-called "AI".

https://www.youtube.com/watch?v=IZ2nD680BA8

This is his first video on the channel, and if you're a fan of human made overthinking, you might want to subscribe.

Humble suggestion: add WinDbg's scripting language to the EsoLang wiki