TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. RHEL has fixes; Ubuntu's are still in…
Topic
Vulnerabilities
<p>Vulnerabilities: Vulnerability research, defensive security, privacy and the changing mechanics of software risk.</p>
Linode Security Incident
Linode's Status Page - Customer Security Advisory: CVE-2026-98432.
Bunny CDN Security Incident
bunny.net's Status Page - Security update regarding one of Status’ infrastructure providers.
Proton’s CEO Cancels AI ‘Re-Interviews’
The move came after 404 Media published an investigation into how Proton CEO Andy Yen was aggressively pushing AI across Proton despite security…
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Phorion has detected a backdoor in the official Claude Code for VS Code extension bundle on the Cursor Marketplace that drops a persistent…
Manifestos, Fear, and ‘Loser Thinking’: Inside Proton’s AI Reckoning
Proton CEO Andy Yen projects a calm persona and rails against Big Tech and critiques AI. Internally, he is pushing engineers to build…
Chained PHP2Shell exploit roots 25 servers, including Dreamgroup Government servers
Custom PHP2Shell Exploit Chained with Kernel LPE to Root Versions of Palo Alto Networks PAN-OS Firewalls in the Wild
Gemini 4 Carbon
Gemini 4 Carbon is Google’s strongest model with state-of-the-art cybersecurity and long horizon capabilities.
Today’s PHP security release, and how Thephp is strengthening security
Describing the story behind how critical security vulnerabilities were found and fixed.
PHP 8.2.35
The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that…
Security advisory: Critical remote code execution vulnerabilities, update now
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
Apple broke an essential presentation feature of iPads
If you teach or present with an iPad, avoid iPadOS 27.