"So there seems to be eight (or more?) different ways to log in. We started iterating through the numbers and when we hit five, we were immediately logged in." - these people control 1000GW of solar power. Set login type to 5 and you are in!

Technical details on this hack: https://jakkaru.de/articles/sungrow-vulnerability-exposes-gigawatts-worldwide

Chinese company Sungrow had a software vulnerability, which was found by an ethical hacker. The vulnerabilty would have allowed to turn off all EU systems and could have resulted in a massive multi-day EU-wide black out

https://www.zeit.de/digital/2026-10/hackerangriff-solaranlagen-sicherheitsluecke-blackout-solarenergie?freebie=b76c264f

I hear we lost Margaret Hamilton today. What an absolute legend; Thank you for leading the way, ma'am. RIP

The 15-year search for a band that charted once and vanished

https://shahidhussain.com/writing/search-for-salvage/

pints per failed unit test

Recorded Future lists infosec.exchange as malware.

Malware category: Trojan

Malware family: FakeUpdates

You've made it, @jerry .

This is also a meme about WinDbg scripting

the tech industry is about to invent books

every techbro when the ai goes offline

@alg0w I don't think programming languages are the bottleneck where these tools are used. I can sort of understand Frida (primarily targeting mobile, where JS is indeed huge), but Windows?

I can't wrap my head around why people keep choosing #JavaScript as their embedded language.

#Frida #WinDbg #ReverseEngineering

Recapping Day One of #Pwn2Own Ireland 2026. We saw some amazing research on display as we awarded $388,500 on the first day of the event. https://youtu.be/24dq8yVPd0c

[RSS] Chromium: WebGPU Security Technical Report

https://chromium.googlesource.com/chromium/src/+/main/docs/security/research/graphics/webgpu_technical_report.md

[RSS] Reversing Engineering a Captive Portal

https://binary.ninja/2026/10/06/reverse-engineering-airbnb-captive-portal.html

[RSS] Why does the compiler sometimes use ud2 and sometimes int 3 for code that shouldn't execute?

https://devblogs.microsoft.com/oldnewthing/20261006-00/?p=112757/

All vendors should have a plan for rapid remediation in the case of active exploitation.

Here’s some emergency fix strategies we’ve seen over the years:

https://projectzero.google/2026/10/emergency-patching.html

Good news or bad news depending on your POV: Usenet archives are suddenly easy to dig through, thanks to a new service. It’s built by a big data guy, and it’s packed with every awkward thing you ever wrote in a newsgroup in 1997.

My deep dive: https://tedium.co/2026/09/14/usenet-rewind-archive-revival-website/

new @tedium

@luc @infosecdj "There are only two hard things in Computer Science: cache invalidation and naming things."

@cR0w The fun part is the old product never really goes away so you can have the bugs of the old *and* the new one!

(And that's the Ciiiircle of Life)