Come To Think of It...

A zero-day the researchers at Sansec are calling StyleSmuggler (CVE-2026-75650, rated CVSS 10.0) has been quietly installing backdoors in Magento Open Source and Adobe Commerce since September 4, and the detail that should make any store operator pause is not the one in the headline. The first recorded compromise landed on a target running the newest security updates. Every version from 2.4.4 up to and including 2.4.9 is affected, and no login is required to get in. The bug slips malicious PHP into Magento's template system through the styles properties, riding past the existing safeguards, and then gets triggered by something totally mundane: a fake "failed payment" email. Unauthenticated remote code execution on a platform installed on more than 160,000 sites, about 14,000 of them in the top million. Adobe dropped an emergency hotfix on September 7 under APSB26-146, but "patched" is doing a lot of heavy lifting in a sentence like that, and this is why. Becaus...

Local inference has a bottleneck that nobody talks about, and it isn't tokens per second. It's one GPU. Run an agent that spawns subagents and suddenly five "parallel" workloads are all queued behind the same card, doing something very close to nothing while they wait for their turn. Nvidia's answer, announced at IFA 2026, is a free, open-source beta called PAIR (Personal AI Router) for Windows, Linux, and macOS. The name is misleading on purpose: it is not a hardware router. It's software that discovers compatible machines on your LAN (mDNS), pairs them with a six-digit code, and encrypts the channel with mTLS. Compatible means RTX 20-series and newer, RTX PRO, DGX Spark, and — worth repeating because it matters — Apple M4 and newer. The subtle-but-important part: PAIR doesn't teach your agents a new API. It proxies the Ollama and LM Studio endpoints you already run, and each model still runs entirely on one machine. It's workload distribution, not co...

A 23-year-old botnet just got killed — and the killer wasn't a server seizure or a takedown order. Sality, a peer-to-peer malware network that started in 2003 as a classic file-infecting virus (the kind that latched onto executables and spread over network shares, USB drives, and file-sharing networks), has been infecting 15,000+ machines for two decades. International law enforcement, CrowdStrike's Counter Adversary Operations team, and the Shadowserver Foundation just cut its operator off from the entire fleet — by poisoning the one thing every Sality bot trusts: its own peer list. Every Sality bot keeps a list of "super peers," publicly reachable infected machines that form the P2P backbone, and it refreshes that list every 40 minutes. The operation exploited exactly that habit: researchers invalidated the legitimate super peers, swapped in defender-controlled sinkholes, and waited for infected machines to come online on their normal maintenance cycles so the remai...

On September 1, CISA quietly dropped six ICS advisories, and every single one of them pointed at the same company: Rockwell Automation. The batch covers RSLinx Classic, the Logix controller platform (ControlLogix, CompactLogix, GuardLogix, and the 5480s), Factory Historian ME, the Redundancy Module Configuration Tool, and FactoryTalk Activation Manager. The headline isn't the count. It's the protocol. Across the whole pile, the common attack surface is CIP, the Common Industrial Protocol, and a single crafted CIP message is enough to take things down. In RSLinx Classic, four different flaws (all versions 4.50 and below, CVSS 8.6) let a malformed or oversized CIP packet crash the service, and in the Logix platform an improper length check on a CIP message pushes the controller into a Major Non-Recoverable Fault. No credentials, no user click, no exploit chain. A packet on the wire is the whole attack. Here's the part that should bother anyone who has ever stood in front of...

Debian has finished the loudest AI argument in free software, and the winning policy is a masterclass in saying nothing with enormous force. The project's General Resolution on LLM usage closed on August 28 with a field that included an outright ban on AI-assisted contributions, and the ban died ugly: amending the Social Contract needed a three-to-one supermajority, and it finished at a ratio of 0.560. The winner, “Responsible Use of Generative AI,” took roughly 575 ballots from 425 unique voters, and it opens with the most Debian sentence possible: “Debian neither endorses nor prohibits the use of generative AI tools.” For a project that once had to vote on what its project lead was called, that non-endorsement is the strong position, and it's worth parsing because the part that says nothing is doing the heavy lifting. The part that has teeth is the responsibility clause. Every contribution, “regardless of how and with which tools they were produced,” must satisfy the same sta...

There's a special place in plugin development for function names that get things wrong in a way that becomes the whole story. GiveWP, the WordPress donation plugin with more than 100,000 active installs, shipped a helper called safeUnserialize() that, as it turns out, was neither safe nor the end of the attack chain. CVE-2026-82222 is a CVSS 10.0 unauthenticated remote code execution flaw, and per the Patchstack writeup, the winning move is a chain of three individually boring-sounding pieces: that broken "safe" unserializer, a donation-processing flow that happily stores attacker-controlled serialized objects in the site's database, and a gadget chain in the libraries GiveWP bundles that can turn those stored objects into arbitrary system commands. On versions 4.16.5.1 and earlier, all an attacker needed was a default install with one published donation form and one active payment gateway. The fix, version 4.16.7.2, landed last Thursday — after Patchstack rejected s...

There's a certain irony to a vulnerability whose attack chain starts with "just make an account." That's what CVE-2026-60004 lets you do to Gitea, the self-hosted Git service, and this week CISA confirmed it's being exploited in the wild. The flaw sits in Gitea's diffpatch API: an attacker with write access to a repository can smuggle content into a patch that installs a malicious Git hook, giving them a shell running as the Gitea service user. Except that Gitea's default configuration allows open registration, so "write access" is what a stranger on the internet gets from a free signup. No phishing, no stolen credentials — just a new account, a new repository, and a diff that becomes a shell. CVSS 9.8; patched in v1.27.1 back on July 27. What makes this one sting is how close to home it lands. Gitea is the self-hoster's answer to GitHub: a lean Go app that runs on a $5 VPS or a spare Pi next to a few other boxes. Shadowserver counts roughly ...

Microsoft's August patch cycle (KB5121003) fixed over 400 security vulnerabilities across Windows 11 24H2 and 25H2. That's the headline you read in the release notes. The sub-headline is that a single driver file, inpoutx64.sys , appears to be conflicting with the update on some systems, causing games like ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals to freeze mid-match, throw EXCEPTION_ACCESS_VIOLATION errors, close without warning, or trigger unexpected system restarts at the worst possible moment. Embark Studios, the developer behind ARC Raiders, publicly flagged KB5121003 as the root cause on their channels before Microsoft even acknowledged the problem existed. It took roughly a week of user reports, studio pushback, and forum threads before the release health dashboard got an official "we are presently investigating" note on it. The silence was doing more damage than the crashes. The practical situation for affected users is a genuine bind with no...

TrueFoundry just shipped TrueForge, an open-source agent harness it markets, almost breathlessly, as the vendor-neutral rival to Claude Managed Agents. The headline number is a 50% cut in agent operating costs. I'd take that with the salt you'd expect from a launch-day benchmark - though, to their credit, the company points at DevRev's public Enterprise-Bench and ships a reproducible benchmark/ folder in the repo rather than just waving its hands over a slide deck. The genuinely interesting part is buried under the pricing talk: where TrueForge actually sits in your stack, and what that position buys you once agents stop being laptop toys and start living inside customer-facing products. An agent harness is the runtime that turns a raw model into something that does work: it runs the loop, calls MCP tools, manages context, sandboxes execution, and holds the session state. Claude Managed Agents gives you all of that, but only with Anthropic's models on Anthropic's...

Over the past two weeks, a threat actor calling himself "TheHatman" has been flooding cybercrime forums with massive internal employee directories pulled directly from the Azure tenants of some of the biggest companies in the world. McDonald's tops the list with 1.7 million records, followed by Tata Consultancy Services at 800,000, Vodafone at 425,000, HCL Technologies at 250,000, InterContinental Hotels Group at 185,000, and Kyndryl at 170,000. The full haul comes to 3.64 million records — names, corporate emails, phone numbers, addresses, job titles, employee IDs, manager details, user group memberships, service accounts, and even Global Administrator listings. What makes this interesting isn't just the scale, but the access vector. The data was exfiltrated from Azure/Entra portals using leaked credentials — not a zero-day in Azure itself, but a targeted campaign where infostealer infections gave TheHatman valid session tokens across multiple organizations. Hudson ...

Since July 2026, a Linux botnet called Evooo1Bot has been quietly compromising internet-facing routers and turning them into SOCKS5 proxy relay nodes — essentially renting out infected hardware as residential proxies. FortiGuard Labs detailed the malware on August 13, noting that the name comes from a hardcoded string "evooo1" found in every binary. It's built on the publicly leaked Mirai source code from 2016, but it's far more ambitious than its ancestors. Instead of just hammering websites with DDoS floods, Evooo1Bot's operator can sell or rent access to infected devices as anonymized traffic relays on the open proxy market. That's a meaningful shift: the botnet isn't just destructive, it's a revenue engine. What makes Evooo1Bot particularly well-built is its modular design. Each infected device gets a persistent presence through five mechanisms simultaneously — systemd service, SysV init script, cron job, shell profile injection, and rc.local — w...

There's a new botnet prowling the internet, and unlike its Mirai ancestors that just wanted to DDoS your favorite CDN into a brownout, Evooo1Bot is playing a longer game. Discovered back in July by FortiGuard Labs researcher Cara Lin, this modular Linux-based malware doesn't just chew up bandwidth — it quietly turns compromised routers and gateway devices into SOCKS5 relay nodes that can be chained into proxy networks for all sorts of downstream purposes. What makes Evooo1Bot particularly interesting to folks who actually maintain edge devices is the breadth of its exploit arsenal. Fortinet's telemetry showed it hammering through a dozen known CVEs across hardware from Alcatel, NETGEAR, Tenda, D-Link, Mitsubishi Electric, and Telesquare — spanning vulnerabilities as old as CVE-2007-3010 (Alcatel OmniPCX Enterprise) and as recent as CVE-2025-10123 (D-Link DIR-823X). That CVE-2007 entry is 19 years old and the router it affects has probably been gathering dust in a cabinet ...

At FMS 2026, ServeTheHome spotted the Supermicro ASG-4116S-NU160R — a single-socket AMD EPYC server crammed with 160 U.2 NVMe drive bays in just 4U of rack space. Stack Solidigm's 122.88TB D5-P5336 drives into those slots and you get roughly 20 petabytes in a single chassis. That's not a prototype; it's shipping. Supermicro's official product page confirms it's built around their H14SSF integrated board with PCIe 5.0 support and hot-swap capability on all 160 bays. Where the design gets interesting is the tradeoff Supermicro made to fit 160 drives. Instead of routing every drive directly to PCIe lanes, the system uses a PCIe switch topology that limits the lanes per drive. The payoff: lower per-drive power draw. The system runs on dual 2.6kW power supplies, which works out to roughly 130–137W per petabyte of storage all-in. That's less than what you'd need just to power the 500 hard drives required for equivalent capacity. The server also includes four addi...

The open-source ecosystem just got two uncomfortable reminders at once. NVIDIA’s local AI round-up shows a wave of open models and tooling pushing agentic workloads onto desktops and single-GPU workstations, with Meta’s Muse Glimmer and DeepSeek-V4-Flash positioned as always-on, local agents you can fine-tune without shipping data to the cloud. That’s the sell: keep the data local, run the model locally, and let the agent handle multi-step tasks on your own hardware. The other reminder came from a Peking University study that’s already making the rounds. Researchers built RepoComplianceBench from 106 issues across 49 repositories with explicit AI contribution rules. They tested four frontier models for four behaviours: refusing to contribute where banned, disclosing AI assistance truthfully, clearing verification gates, and escalating to humans. The agents almost never retrieved the rules on their own. With reminders, quoted policies and verifier feedback they improved on disclosure a...

OpenAI just launched the ChatGPT desktop app for Linux, and the timing is honestly better than most people realize. The app is in preview, supports Ubuntu 24.04, Ubuntu 26.04, Debian 13, and Fedora 43/44, and ships as both x64 and ARM64 packages — RPM and Debian. It covers all three flavors: ChatGPT (the regular chat), ChatGPT Work, and Codex (the coding agent). This is the first time the official desktop client hits the Linux platform, meaning the company that built the most-used AI chat app in the world just completed the trifecta of desktop operating systems. Windows and macOS got theirs first, of course. The Linux preview is the longest-waited piece, and OpenAI confirmed in an email that "Linux has been one of the most-requested platforms" for the desktop app. What's actually interesting here isn't just that the app exists — it's what the Linux version can do that a browser tab can't. The desktop Codex integration runs in your local repository, meaning i...

Arch Linux's community repository has been hit by yet another wave of malicious package takeovers, forcing the project to temporarily disable package adoptions in the Arch User Repository. The announcement came from contributor Robin Candau on the AUR mailing list, and it's the third major incident of this kind in under two months. The first wave in mid-June saw more than 1,500 malicious packages land in the AUR before they could be cleaned up. Then Russian spam and profanity campaigns clogged the repository. Now here comes a fresh round of sophisticated malware, and the maintainers are hitting the emergency pause button again. Independent analysis from the Independent Federated Intelligence Network (IFIN) confirmed the campaign began July 29 with the package 'openconnect-sso' and bears strong similarities to previous attacks. What makes this particular wave particularly nasty is that the attack chain is actually well-engineered. The first-stage loader checks for debu...

Last week, Arch Linux temporarily disabled one of the AUR's most useful features — the ability for anyone to adopt an orphaned, unmaintained package — after security researchers detected yet another wave of coordinated supply-chain attacks. The campaign, dubbed "Atomic Arch" by the independent threat intelligence community, is the third major assault on the repository in as many months. The first hit in late May, the second came in June with over 400 packages compromised, and now this latest round has pushed at least 200 more packages into malicious hands. What makes this round especially nasty is how the malware is built. Independent analysis from the Federated Intelligence Network shows a two-stage payload: the first stage is a loader that actively evades detection by checking for debuggers, sandboxes, and virtual machines before installing itself as a systemd service and setting up cron persistence. It downloads a second-stage Rust-based infostealer over Tor, disguis...

There's a quiet crisis brewing in a lot of engineering orgs: AI-generated code is arriving faster than anyone can properly review, maintain, or secure it, and nobody built today's platform processes to handle that speed. The headline numbers are ugly. Cloud Security Alliance's research found that AI-assisted developers produce commits at three to four times the rate of their peers while introducing security findings at ten times the rate. Veracode's testing of over 100 models shows 45% of AI-generated code samples introduce OWASP Top 10 vulnerabilities. A university study of 576,000 LLM-generated code samples discovered nearly 20% of suggested packages don't actually exist, opening the door to 'slopsquatting' — attackers registering those hallucinated package names as malicious dependencies before developers notice. The real problem isn't that AI writes bad code. The problem is that your review process, your security gates, and your long-term maintenance...

Intel's Granite Rapids Xeon 6 launched in 2024 with DDR5-6400 memory support, and nobody expected the platform to live much longer than a couple of years before the next-gen Diamond Rapids replaced it. But the memory controller inside those chips turned out to be so well overbuilt that Intel can now enable DDR5-8000 RDIMMs on existing SKUs without a single transistor change. Starting this August, select Xeon 6 6700P processors will support the faster memory — effectively a mid-generation hardware upgrade that costs customers nothing extra and buys more memory bandwidth for AI workloads that are increasingly starved for it. The move tells you something about how server silicon gets designed. Granite Rapids was conceived early enough in the decade that Intel's memory controller predated the JEDEC spec for DDR5-8000. They built it to handle MRDIMMs — those multiplexed, multi-rank chips that run at 8800 MT/sec — and by coincidence that controller is also fast enough for tradition...

At Computex, while the big processor vendors are still keeping their 2026 roadmaps under wraps, the OEMs are getting increasingly desperate to show off the hardware they've built around them. MSI's booth included something that quietly caught my attention: a 1RU liquid-cooled chassis that holds two dual-socket server nodes, each running an upcoming AMD EPYC "Venice" processor. That means four complete Venice CPUs and 64 RDIMMs crammed into a single rack unit. The whole thing is called the CD182-S6091-X2 (DLC — "Direct Liquid Cooled"), and it's the kind of machine that exists because air cooling has officially given up. What makes this worth paying attention to isn't just the density. It's the platform shift. Venice brings a new 16-channel DDR5 memory bus per socket, PCIe Gen6 lanes, and TDPs that AMD hasn't yet disclosed but are clearly pushing past the 500-watt mark that fifth-generation chips already hit. MSI solved the thermal problem by...