RE: https://cosocial.ca/@mhoye/117326705107715161

That last paragraph is a compelling point that runs deep.

@xssfox More interesting technical details here (I can't vouch for accuracy):
https://collusion.wiki/
https://transluce.org/agent-activity

RE: https://neuromatch.social/@jonny/117324790823856750

This thread is incredibly funny.

Apparently, any user can ask Meta's brand new chatbot Muse to zip and send its whole server-side VM OS filesystem system to the user.

@jonny is going live through the intestines of the filesystem right now.

He reports extremely shoddy work while also a lot of malovent instructions by Meta to the chatbot against the user.

We're big fans of Muse (the band) in this household and it's incredibly ironic that Muse (the chatbot) forcibly took the social media handles of Muse (the band). Because what're Muse (the band)'s lyrics often about? Sci Fi and techno dystopia.

https://www.vice.com/en/article/longtime-rock-band-forced-to-change-social-media-handles-so-meta-can-launch-identically-named-ai/

We now publish tar'd up shallow git clones you can use with your CI. Please carefully read the safety caveats and use the script we provide to make sure you're not getting something malicious:

https://people.kernel.org/monsieuricon/using-shallow-git-tarballs-for-ci

Your weekend reading assignment has arrived early.

A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko.

https://archives.phrack.org/dl/73/the-proxy-that-made-no-sense.pdf

New vulnerability report from Talos:

Apple macOS CoreWLAN information disclosure vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2376

Whatever they smoke at #F5, I don't want any of it.

[RSS] Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

[RSS] CVE-2024-0244 - A heap buffer overflow in the Canon MF753Cdw printer

https://www.thezdi.com/blog/2026/9/23/cve-2024-0244-a-heap-buffer-overflow-in-the-canon-mf753cdw-printer

[RSS] Google's PageBreak Project - Real-World Findings

https://bughunters.google.com/blog/pagebreak-real-world-findings

I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR).

Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up.

https://jobs.nvidia.com/careers?query=JR2026488

DarkMe has dropped the WinRAR and SmartScreen zero-days it used previously. Huntress saw it delivered through a phising-linked .pif file, with persistence hidden behind a custom protocol handler. https://www.huntress.com/blog/darkme-rat-abandons-exploits

A nice balanced, objective analysis and way forward by the Turing institute with regard to frontier AI, recommended reading (no hype whatsoever and easy to read).
https://www.turing.ac.uk/news/publications/frontier-ai-risks-practical-way-forward
#AI #frontierAI #turinginstitute

So we hear people complaining wind turbine blades supposedly can't be recycled. This isn't true, but even if it were: over its lifetime, a large wind turbine (11MW, offshore), will generate the electrical equivalent of burning ~200,000 tons of coal in an efficient thermal power plant. The total weight of these terrible blades? 100 tons. So spare me the whining.

What is OBJECT_ATTRIBUTES and how it's used?
The Windows API hides it, but every native create or open call needs it.

Full write-up: https://trainsec.net/library/windows-internals/object-attributes-explained-how-the-native-api-opens-kernel-objects/

I started with the “complicated” piece in 2021 or 2022. I finished the hand embroidery but it didn’t feel done, so I stashed it for years. I recently learned to do needle tatting and thought it would be exactly what this piece needed!

That was true enough to get me to also make the “simple” piece, which was tedious because I couldn’t leave any errors at all in it. I had to frog whole lines three times.

RIP Tony Hoare, whose wisdom is needed more every day.

#fiberarts #embroidery #crossStitch

saw this pop up in my feed.

https://www.reddit.com/r/ClaudeAI/comments/1wm5c21/i_am_done_with_this_shit/

and the top comment from the clanker moderator bot is fucking brutal "Yes, you're a meat proxy, deal with it."

WordPress patched an unauth path traversal yesterday: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp

https://wordpress.org/news/2026/09/wordpress-7-1-2-release/

This is now being exploited, a few hours later: https://x.com/ethicalhack3r/status/2102747373873004680

New vulnerability report from Talos:

Foxit Reader Array resetForm Use-After-Free Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2446

CVE-2026-91799,CVE-2026-91799