huh, all the interesting vulnerabilities really are chains of weird quirks
November 5, 2026 at 1:22 PM
huh, all the interesting vulnerabilities really are chains of weird quirks
"reddit for vulnerabilities" where you upvote/downvote based on how bad they are is this anything
November 5, 2026 at 4:35 PM
"reddit for vulnerabilities" where you upvote/downvote based on how bad they are is this anything
many of these are boring human vulnerabilities, caused by boring human incentive structures
November 6, 2026 at 4:20 PM
many of these are boring human vulnerabilities, caused by boring human incentive structures
Great work about how race science exploits vulnerabilities of institutional science to perpetuate itself! By @malinowska.bsky.social
New paper out in our special collection of Evolutionary Human Sciences on scientific racism, by philosopher Joanna Karolina Malinowska.
The paper describes "epistemic laundering" - how methodologically flawed claims about race continue to circulate in scientific venues despite repeated criticism
The paper describes "epistemic laundering" - how methodologically flawed claims about race continue to circulate in scientific venues despite repeated criticism
Epistemic Laundering and the Persistence of Scientific Racism | Evolutionary Human Sciences | Cambridge Core
Epistemic Laundering and the Persistence of Scientific Racism
www.cambridge.org
November 7, 2026 at 8:08 AM
Great work about how race science exploits vulnerabilities of institutional science to perpetuate itself! By @malinowska.bsky.social
A cyberattack on supermarket fridges, bomb threats to planes and software vulnerabilities have Europe on edge as government officials encourage resilience and stockpiling.
Bomb Threats and Cyberattacks in Europe Inject Unease Into Everyday Life
A cyberattack on supermarket fridges, bomb threats to planes and software vulnerabilities have Europe on edge as government officials encourage resilience and stockpiling.
trib.al
November 7, 2026 at 2:18 PM
A cyberattack on supermarket fridges, bomb threats to planes and software vulnerabilities have Europe on edge as government officials encourage resilience and stockpiling.
this is... true-ish, but I feel very confident that we will then rapidly learn that AI-rewritten greenfield software has many security vulnerabilities, along with many fascinating new failure modes
*What is this situation like
*It''s like the difference between hand-painting and photography
*It's like the difference between musical performance and recorded music
*It's like the difference between folk-customs and bureaucratic boilerplate
*What other, better metaphors might apply
*It''s like the difference between hand-painting and photography
*It's like the difference between musical performance and recorded music
*It's like the difference between folk-customs and bureaucratic boilerplate
*What other, better metaphors might apply
November 6, 2026 at 9:17 AM
this is... true-ish, but I feel very confident that we will then rapidly learn that AI-rewritten greenfield software has many security vulnerabilities, along with many fascinating new failure modes
We are in the golden age of stupid vulnerabilities and this is the stupidest one I have seen this year: sshhole.com
*sshole · sshhole.com
openssh on musl linux has been letting people into password-less accounts since 2016.
sshhole.com
November 6, 2026 at 12:24 PM
We are in the golden age of stupid vulnerabilities and this is the stupidest one I have seen this year: sshhole.com
Convicted MAGA fraudster influencer James O’Keefe has been criminally charged with unlawful voting and identity theft as a result of his fake operation to uncover nonexistent vulnerabilities in Minnesota’s election system.
The actual voter fraud always comes from fascist republicans.
The actual voter fraud always comes from fascist republicans.
November 3, 2026 at 4:36 PM
Convicted MAGA fraudster influencer James O’Keefe has been criminally charged with unlawful voting and identity theft as a result of his fake operation to uncover nonexistent vulnerabilities in Minnesota’s election system.
The actual voter fraud always comes from fascist republicans.
The actual voter fraud always comes from fascist republicans.
I am however also not responsible for urgently responding to any security vulnerabilities rn 💅
November 5, 2026 at 9:36 PM
I am however also not responsible for urgently responding to any security vulnerabilities rn 💅
I'm so tired of vulnerabilities that are the result of C's underdesigned and underconstrained nature
we can't keep doing this
we can't keep tolerating the use of this sloppy shit in our most critical software
we can't keep doing this
we can't keep tolerating the use of this sloppy shit in our most critical software
November 5, 2026 at 3:27 PM
I'm so tired of vulnerabilities that are the result of C's underdesigned and underconstrained nature
we can't keep doing this
we can't keep tolerating the use of this sloppy shit in our most critical software
we can't keep doing this
we can't keep tolerating the use of this sloppy shit in our most critical software
In America’s overcrowded hospitals, emergency rooms are turning into medical waiting rooms, creating vulnerabilities for patients. on.wsj.com/4kBt8xo
November 6, 2026 at 8:55 PM
In America’s overcrowded hospitals, emergency rooms are turning into medical waiting rooms, creating vulnerabilities for patients. on.wsj.com/4kBt8xo
notice how there's no openssh vulnerabilities with bionic libc #AndroidWins
November 5, 2026 at 2:04 PM
notice how there's no openssh vulnerabilities with bionic libc #AndroidWins
Well. At least we're knocking out all these vulnerabilities before we get to "Let's circle back around after the holidays" season.
November 5, 2026 at 3:32 PM
Well. At least we're knocking out all these vulnerabilities before we get to "Let's circle back around after the holidays" season.
“We've developed an autonomous vulnerability discovery, exploitation, and patching pipeline. In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.”
🤯
🤯
A thousand fewer paths to root
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
openai.com
November 5, 2026 at 3:34 AM
“We've developed an autonomous vulnerability discovery, exploitation, and patching pipeline. In one run with our cyber model, it validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.”
🤯
🤯
If you think that Microsoft software had no vulnerabilities before they started Copilot...
November 5, 2026 at 11:21 PM
If you think that Microsoft software had no vulnerabilities before they started Copilot...
I love how I have to update my kernel every time I turn on my computer or else there's 12 new insane vulnerabilities being exploited, awesome
November 6, 2026 at 3:26 AM
I love how I have to update my kernel every time I turn on my computer or else there's 12 new insane vulnerabilities being exploited, awesome
I wonder what horrors of software vulnerabilities await me, today. I tell you, this stuff is breaking me.
November 6, 2026 at 6:59 AM
I wonder what horrors of software vulnerabilities await me, today. I tell you, this stuff is breaking me.
I do too. His uninhibited extremism is going to expose the vulnerabilities and mobilize opposition against him.
November 7, 2026 at 1:32 AM
I do too. His uninhibited extremism is going to expose the vulnerabilities and mobilize opposition against him.
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog.
securityaffairs.com
November 7, 2026 at 10:17 AM
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
What is the equivalent of Eternal September but for security vulnerabilities? I ask because we've entered it.
November 5, 2026 at 2:17 PM
What is the equivalent of Eternal September but for security vulnerabilities? I ask because we've entered it.
OpenAI is discovering that there's money to be made by playing both sides of the cybersecurity game.
- Sell AI tools that can be used to hack websites and exploit software vulnerabilities.
- Sell AI tools that protect those same websites and software from cyberattacks and vulnerabilities.
- Sell AI tools that can be used to hack websites and exploit software vulnerabilities.
- Sell AI tools that protect those same websites and software from cyberattacks and vulnerabilities.
November 5, 2026 at 2:05 AM
OpenAI is discovering that there's money to be made by playing both sides of the cybersecurity game.
- Sell AI tools that can be used to hack websites and exploit software vulnerabilities.
- Sell AI tools that protect those same websites and software from cyberattacks and vulnerabilities.
- Sell AI tools that can be used to hack websites and exploit software vulnerabilities.
- Sell AI tools that protect those same websites and software from cyberattacks and vulnerabilities.
And “What are the security vulnerabilities?”
November 7, 2026 at 12:30 PM
And “What are the security vulnerabilities?”
GStreamer 1.28.9 fixes security vulnerabilities, playback crashes, streaming issues, and hardware acceleration problems.
linuxiac.com/gstreamer-1-...
#Linux #OpenSource #Multimedia
linuxiac.com/gstreamer-1-...
#Linux #OpenSource #Multimedia
GStreamer 1.28.9 Multimedia Framework Released with Security and Playback Fixes
GStreamer 1.28.9 fixes security vulnerabilities, playback crashes, streaming issues, and hardware acceleration problems.
linuxiac.com
November 6, 2026 at 2:29 PM
GStreamer 1.28.9 fixes security vulnerabilities, playback crashes, streaming issues, and hardware acceleration problems.
linuxiac.com/gstreamer-1-...
#Linux #OpenSource #Multimedia
linuxiac.com/gstreamer-1-...
#Linux #OpenSource #Multimedia