or1k.net
Zig 0.17, Microsoft Rust Tier-1 - Obscura VPN: Digest for October 4, 2026
Zig 0.17 overhauls its build system, Microsoft promotes Rust to an internal Tier-1 language, and Obscura VPN splits routing to eliminate logging trust.
π° Zig 0.17, Microsoft Rust Tier-1 - Obscura VPN: Digest for October 4, 2026
β’ Zig 0.17 Delivers Working x86_64 Incremental Compilation
β’ Greg Kroah-Hartman Drops Seven Fresh Stable Kernels
β’ Microsoft Promotes Rust to Internal Tier-1 Status
β’ Vincent Guittot's Scheduler Patches Tackle Peak Latency
β’ Arm Tackles Massive Core Counts With TLBI Domains
β’ Parrot OS 7.4 Cleans Up KDE and Overhauls AnonSurf
β’ Valve's Timur KristΓ³f Breathes New Life Into Ancient AMD GPUs
β’ Warlock Group Hijacks SharePoint Using Vulnerable Drivers
β’ Wine 11.19 Lands Vulkan Color Management on Wayland
β’ openSUSE Factory Adopts ZUPT Post-Quantum Backup Tool
β’ LunarG's KosmicKrisp Achieves Vulkan 1.4 Conformance on macOS
β’ KDE Plasma 6.8 Beta 2 Squared Up for Release
β’ NVIDIA Hikes GB10 Prices and Drops a Costly 64GB Model
β’ Carl Dong's Obscura VPN Replaces No-Logs with Cryptography
β’ KDE Akademy 2026 Focuses on Continuous Delivery and Wayland
https://or1k.net/digests/daily-digest-2026-10-04/
β’ Zig 0.17 Delivers Working x86_64 Incremental Compilation
β’ Greg Kroah-Hartman Drops Seven Fresh Stable Kernels
β’ Microsoft Promotes Rust to Internal Tier-1 Status
β’ Vincent Guittot's Scheduler Patches Tackle Peak Latency
β’ Arm Tackles Massive Core Counts With TLBI Domains
β’ Parrot OS 7.4 Cleans Up KDE and Overhauls AnonSurf
β’ Valve's Timur KristΓ³f Breathes New Life Into Ancient AMD GPUs
β’ Warlock Group Hijacks SharePoint Using Vulnerable Drivers
β’ Wine 11.19 Lands Vulkan Color Management on Wayland
β’ openSUSE Factory Adopts ZUPT Post-Quantum Backup Tool
β’ LunarG's KosmicKrisp Achieves Vulkan 1.4 Conformance on macOS
β’ KDE Plasma 6.8 Beta 2 Squared Up for Release
β’ NVIDIA Hikes GB10 Prices and Drops a Costly 64GB Model
β’ Carl Dong's Obscura VPN Replaces No-Logs with Cryptography
β’ KDE Akademy 2026 Focuses on Continuous Delivery and Wayland
https://or1k.net/digests/daily-digest-2026-10-04/
or1k.net
Zig 0.17, Intel Clearwater Forest and Linux 7.3-rc6: Digest for October 5, 2026
Zig 0.17 debuts with a major build overhaul, while Intel rolls out Clearwater Forest Xeon 6+ SKUs, and Linux 7.3-rc6 tackles AI-generated patch churn.
π° Zig 0.17, Intel Clearwater Forest and Linux 7.3-rc6: Digest for October 5, 2026
β’ Zig 0.17 Cleans Up Its Linker and Build Churn
β’ openSUSE Standardizes on ZUPT for Post-Quantum Backups
β’ Rocky Linux Devs Rescue OpenRadioss with OpenCourant Fork
β’ DigitalOcean Quietly Pulls the Plug on Open Source Credits
β’ MGLRU-FG Patches Bring Massive Performance Gains to Memory Reclaim
β’ Kagi Abandons Orion WebKit Browser on Linux, Hopes for Fork
β’ GNOME Updates Damned Lies Platform, Demands Human Sign-Offs on AI Code
β’ NVIDIA Latency Tests Show Wayland and X.Org Are Neck and Neck
β’ Linux Kernel Gains Workarounds for Fujitsu MONAKA Hardware Bugs
β’ AMD Prepares Video Engine 3.0 and Hardware Blocks for Linux 7.4
β’ Pangolin 1.24 Brings Exit Nodes and Linux Subnet Routing
β’ China-Aligned TA419 Phishes AI Experts Using Frameless BitB
β’ Suspected ShinyHunters Administrator Detained in Jordan
β’ Linux 7.3-rc6 Drops with AI-Fueled Patch Churn
β’ Intel's Clearwater Forest Xeon 6+ SKUs Hit the Open Market
https://or1k.net/digests/daily-digest-2026-10-05/
β’ Zig 0.17 Cleans Up Its Linker and Build Churn
β’ openSUSE Standardizes on ZUPT for Post-Quantum Backups
β’ Rocky Linux Devs Rescue OpenRadioss with OpenCourant Fork
β’ DigitalOcean Quietly Pulls the Plug on Open Source Credits
β’ MGLRU-FG Patches Bring Massive Performance Gains to Memory Reclaim
β’ Kagi Abandons Orion WebKit Browser on Linux, Hopes for Fork
β’ GNOME Updates Damned Lies Platform, Demands Human Sign-Offs on AI Code
β’ NVIDIA Latency Tests Show Wayland and X.Org Are Neck and Neck
β’ Linux Kernel Gains Workarounds for Fujitsu MONAKA Hardware Bugs
β’ AMD Prepares Video Engine 3.0 and Hardware Blocks for Linux 7.4
β’ Pangolin 1.24 Brings Exit Nodes and Linux Subnet Routing
β’ China-Aligned TA419 Phishes AI Experts Using Frameless BitB
β’ Suspected ShinyHunters Administrator Detained in Jordan
β’ Linux 7.3-rc6 Drops with AI-Fueled Patch Churn
β’ Intel's Clearwater Forest Xeon 6+ SKUs Hit the Open Market
https://or1k.net/digests/daily-digest-2026-10-05/
or1k.net
NetScaler Zero-Day, Rejetto HFS Flaw and OpenSSH 10.6: Digest for October 6, 2026
Citrix NetScaler zero-day CVE-2026-88779, Rejetto HFS session forgery CVE-2026-61500, and OpenSSH 10.6 release with post-quantum algorithms.
π° NetScaler Zero-Day, Rejetto HFS Flaw and OpenSSH 10.6: Digest for October 6, 2026
β’ Citrix Patches NetScaler SAML Zero-Day Under Attack
β’ Rejetto HFS Forking Up Predictable Sessions for RCE
β’ Kubernetes Node Swap Gains GA in v1.34
β’ OpenSSH 10.6 Drops LZ77 to Fight Side-Channels
β’ Linux Kernel 7.3-rc6 Arrives on Schedule
β’ Mold 3.0 Linker Rewritten in Rust
β’ Linux ZRAM Splits Read and Write Streams
β’ Critical Atlassian Flaw Exposes Files Across 8 Products
β’ LibreOffice and OpenOffice ODB Flaw Runs Code on Open
β’ Google Pauses Open Source Bug Bounty Product Reports
β’ Linux 7.4 Adds Mainline Support for Google Tensor G5
β’ System76 Bans AI Code in COSMIC Pull Requests
β’ IBM and Red Hat Tout 400+ Vulnerabilities Found by AI
β’ Exchange Server Flaw Lets Users Read Mailboxes
β’ Realtek SDK Botnet Cling Abuses STUN for C2
https://or1k.net/digests/daily-digest-2026-10-06/
β’ Citrix Patches NetScaler SAML Zero-Day Under Attack
β’ Rejetto HFS Forking Up Predictable Sessions for RCE
β’ Kubernetes Node Swap Gains GA in v1.34
β’ OpenSSH 10.6 Drops LZ77 to Fight Side-Channels
β’ Linux Kernel 7.3-rc6 Arrives on Schedule
β’ Mold 3.0 Linker Rewritten in Rust
β’ Linux ZRAM Splits Read and Write Streams
β’ Critical Atlassian Flaw Exposes Files Across 8 Products
β’ LibreOffice and OpenOffice ODB Flaw Runs Code on Open
β’ Google Pauses Open Source Bug Bounty Product Reports
β’ Linux 7.4 Adds Mainline Support for Google Tensor G5
β’ System76 Bans AI Code in COSMIC Pull Requests
β’ IBM and Red Hat Tout 400+ Vulnerabilities Found by AI
β’ Exchange Server Flaw Lets Users Read Mailboxes
β’ Realtek SDK Botnet Cling Abuses STUN for C2
https://or1k.net/digests/daily-digest-2026-10-06/
or1k.net
Atlassian Zero-Day CVE-2026-21589 - LMCache RCE & Podman Conmon v3: Digest for October 7, 2026
Critical Atlassian CVE-2026-21589 file access and LMCache remote code execution vulnerabilities exploited in the wild, alongside Kubernetes cgroup v2 mandates.
π° Atlassian Zero-Day CVE-2026-21589 - LMCache RCE & Podman Conmon v3: Digest for October 7, 2026
β’ Linux Backdoors Emulate Email Security Tools in Asia
β’ Kubernetes Drops the Hammer on Cgroup v1
β’ RTIPC Delivers Zero-Overhead Real-Time IPC for Linux
β’ Atlassian Data Center Flaw Sees Instant Exploitation
β’ FBI Warns FortiBleed Campaign Harvests 86k Credentials
β’ Raspberry Pi OS Desktop Finally Arrives for x86-64
β’ NVIDIA 615.78.08 Linux Driver Fixes Wayland and Latency
β’ OpenVPN 2.7.8 Patches Certificate and DCO Bugs
β’ Unpatched LMCache Flaw Allows Remote Code Execution
β’ Podman Community Kicks Off Rust-Based Conmon v3 Testing
https://or1k.net/digests/daily-digest-2026-10-07/
β’ Linux Backdoors Emulate Email Security Tools in Asia
β’ Kubernetes Drops the Hammer on Cgroup v1
β’ RTIPC Delivers Zero-Overhead Real-Time IPC for Linux
β’ Atlassian Data Center Flaw Sees Instant Exploitation
β’ FBI Warns FortiBleed Campaign Harvests 86k Credentials
β’ Raspberry Pi OS Desktop Finally Arrives for x86-64
β’ NVIDIA 615.78.08 Linux Driver Fixes Wayland and Latency
β’ OpenVPN 2.7.8 Patches Certificate and DCO Bugs
β’ Unpatched LMCache Flaw Allows Remote Code Execution
β’ Podman Community Kicks Off Rust-Based Conmon v3 Testing
https://or1k.net/digests/daily-digest-2026-10-07/
β€3
or1k.net
SonicWall CVE-2026-102255, Tmux 3.8 and Shai-Hulud Worm: Digest for October 8, 2026
SonicWall patches critical CVSS 10.0 SSRF CVE-2026-102255, a Shai-Hulud worm compromises the Tensorlake npm package, and Tmux 3.8 updates floating panes.
π° SonicWall CVE-2026-102255, Tmux 3.8 and Shai-Hulud Worm: Digest for October 8, 2026
β’ SonicWall's Portal Flunks Basic Security with Third CVSS 10.0 SSRF
β’ TLD Hijackers Snatch Rogue Certificates for Google Domains
β’ Gentoo Needs New Infrastructure Sponsors After Supporters Pull Out
β’ Over Half a Million Active Credentials Rot on Public GitHub Repos
β’ IBM and Red Hat's $5B Lightwell Fixes 400 Unknown Java Flaws
β’ Tensorlake NPM Package Hijacked by Self-Propagating Worm
β’ HPE ProLiant Gen 13 Packs AMD EPYC 9006 and Hardened iLO 8
β’ Tmux 3.8 Boosts Floating Panes and Adds Automatic Themes
https://or1k.net/digests/daily-digest-2026-10-08/
β’ SonicWall's Portal Flunks Basic Security with Third CVSS 10.0 SSRF
β’ TLD Hijackers Snatch Rogue Certificates for Google Domains
β’ Gentoo Needs New Infrastructure Sponsors After Supporters Pull Out
β’ Over Half a Million Active Credentials Rot on Public GitHub Repos
β’ IBM and Red Hat's $5B Lightwell Fixes 400 Unknown Java Flaws
β’ Tensorlake NPM Package Hijacked by Self-Propagating Worm
β’ HPE ProLiant Gen 13 Packs AMD EPYC 9006 and Hardened iLO 8
β’ Tmux 3.8 Boosts Floating Panes and Adds Automatic Themes
https://or1k.net/digests/daily-digest-2026-10-08/
π₯°1
or1k.net
AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
AnyDesk Linux patch hides a pre-auth root exploit, Citrix NetScaler fixes CVE-2026-107406, and Flathub reverses its blanket ban on AI-generated apps.
π° AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
β’ Let's Encrypt moves to 64-day certificates in 2027
β’ AnyDesk's silent patch hides a pre-auth root exploit
β’ Critical Citrix NetScaler SAML bug opens door to RCE
β’ Anthropic launches free AI scanner for open-source code
β’ European Cyber Resilience Act makes private forks an expensive mistake
β’ CISA warns of Chinese state actors exploiting ancient bugs
β’ Flathub drops blanket AI ban for strict disclosure rules
β’ Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
β’ Let's Encrypt moves to 64-day certificates in 2027
β’ AnyDesk's silent patch hides a pre-auth root exploit
β’ Critical Citrix NetScaler SAML bug opens door to RCE
β’ Anthropic launches free AI scanner for open-source code
β’ European Cyber Resilience Act makes private forks an expensive mistake
β’ CISA warns of Chinese state actors exploiting ancient bugs
β’ Flathub drops blanket AI ban for strict disclosure rules
β’ Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
or1k.net
Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
Python 3.15 lands with default UTF-8 and new built-ins, KDE Frameworks 6.31.0 drops, and Woodpecker CI 3.19 adds server-enforced agent labels.
π° Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
β’ Python 3.15 lands with UTF-8 default and new built-ins
β’ GhostAction campaign hits thousands of repos with fake security audits
β’ Solus starts relicensing package repos to clear path for aerynOS
β’ KDE Frameworks 6.31.0 arrives on schedule
β’ Woodpecker CI 3.19 locks down agent labels and fixes security bugs
β’ Glycin gets CMYK support for proper print color handling
β’ ICANN opens floodgates for over sixteen hundred new gTLDs
β’ FBI arrests another suspect linked to ShinyHunters contractor breach
β’ BentoPDF edits documents locally in your browser via WebAssembly
β’ QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
β’ Python 3.15 lands with UTF-8 default and new built-ins
β’ GhostAction campaign hits thousands of repos with fake security audits
β’ Solus starts relicensing package repos to clear path for aerynOS
β’ KDE Frameworks 6.31.0 arrives on schedule
β’ Woodpecker CI 3.19 locks down agent labels and fixes security bugs
β’ Glycin gets CMYK support for proper print color handling
β’ ICANN opens floodgates for over sixteen hundred new gTLDs
β’ FBI arrests another suspect linked to ShinyHunters contractor breach
β’ BentoPDF edits documents locally in your browser via WebAssembly
β’ QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
β€3