Rethinking Reverse Engineering for the AI Era:

https://www.romainthomas.fr/publication/26-rethinking-reverse-engineering-for-the-ai-era/

I tempted to do a small giveaway: reply with your best success *or* horror story related to electronics. I'll pick ~3 winners around EOW and send them a copy of The Secret Life of Circuits.

Plz no AI slop. Won't ship to Russia.

Webseeds should be working again for https://infocon.org/ #InfoCon.
There was a problem with http range requests that should now be fixed. Please let us know if you see a difference!

Any pentesting firm behaving like OpenAI would be shutting down and counting lawsuits within a couple of months.

This new rera of Big AI doing cyber surely feels like the late 1980s/early 1990s of the Internet Wild West

RE: https://cosocial.ca/@mhoye/117326705107715161

That last paragraph is a compelling point that runs deep.

@xssfox More interesting technical details here (I can't vouch for accuracy):
https://collusion.wiki/
https://transluce.org/agent-activity

RE: https://neuromatch.social/@jonny/117324790823856750

This thread is incredibly funny.

Apparently, any user can ask Meta's brand new chatbot Muse to zip and send its whole server-side VM OS filesystem system to the user.

@jonny is going live through the intestines of the filesystem right now.

He reports extremely shoddy work while also a lot of malovent instructions by Meta to the chatbot against the user.

We're big fans of Muse (the band) in this household and it's incredibly ironic that Muse (the chatbot) forcibly took the social media handles of Muse (the band). Because what're Muse (the band)'s lyrics often about? Sci Fi and techno dystopia.

https://www.vice.com/en/article/longtime-rock-band-forced-to-change-social-media-handles-so-meta-can-launch-identically-named-ai/

We now publish tar'd up shallow git clones you can use with your CI. Please carefully read the safety caveats and use the script we provide to make sure you're not getting something malicious:

https://people.kernel.org/monsieuricon/using-shallow-git-tarballs-for-ci

Your weekend reading assignment has arrived early.

A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko.

https://archives.phrack.org/dl/73/the-proxy-that-made-no-sense.pdf

New vulnerability report from Talos:

Apple macOS CoreWLAN information disclosure vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2376

Whatever they smoke at #F5, I don't want any of it.

[RSS] Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

[RSS] CVE-2024-0244 - A heap buffer overflow in the Canon MF753Cdw printer

https://www.thezdi.com/blog/2026/9/23/cve-2024-0244-a-heap-buffer-overflow-in-the-canon-mf753cdw-printer

[RSS] Google's PageBreak Project - Real-World Findings

https://bughunters.google.com/blog/pagebreak-real-world-findings

I'm hiring an exceptional Offensive Security Researcher for my team at NVIDIA (Offensive Security Research - OSR).

Firmware, microcode, RISC-V, hypervisors, and shipping mitigations like HW CFI, Memory Tagging, and Pointer Masking from the ground up.

https://jobs.nvidia.com/careers?query=JR2026488

DarkMe has dropped the WinRAR and SmartScreen zero-days it used previously. Huntress saw it delivered through a phising-linked .pif file, with persistence hidden behind a custom protocol handler. https://www.huntress.com/blog/darkme-rat-abandons-exploits

A nice balanced, objective analysis and way forward by the Turing institute with regard to frontier AI, recommended reading (no hype whatsoever and easy to read).
https://www.turing.ac.uk/news/publications/frontier-ai-risks-practical-way-forward
#AI #frontierAI #turinginstitute

So we hear people complaining wind turbine blades supposedly can't be recycled. This isn't true, but even if it were: over its lifetime, a large wind turbine (11MW, offshore), will generate the electrical equivalent of burning ~200,000 tons of coal in an efficient thermal power plant. The total weight of these terrible blades? 100 tons. So spare me the whining.

What is OBJECT_ATTRIBUTES and how it's used?
The Windows API hides it, but every native create or open call needs it.

Full write-up: https://trainsec.net/library/windows-internals/object-attributes-explained-how-the-native-api-opens-kernel-objects/