or1k.net
SonicWall CVE-2026-102255, Tmux 3.8 and Shai-Hulud Worm: Digest for October 8, 2026
SonicWall patches critical CVSS 10.0 SSRF CVE-2026-102255, a Shai-Hulud worm compromises the Tensorlake npm package, and Tmux 3.8 updates floating panes.
📰 SonicWall CVE-2026-102255, Tmux 3.8 and Shai-Hulud Worm: Digest for October 8, 2026
• SonicWall's Portal Flunks Basic Security with Third CVSS 10.0 SSRF
• TLD Hijackers Snatch Rogue Certificates for Google Domains
• Gentoo Needs New Infrastructure Sponsors After Supporters Pull Out
• Over Half a Million Active Credentials Rot on Public GitHub Repos
• IBM and Red Hat's $5B Lightwell Fixes 400 Unknown Java Flaws
• Tensorlake NPM Package Hijacked by Self-Propagating Worm
• HPE ProLiant Gen 13 Packs AMD EPYC 9006 and Hardened iLO 8
• Tmux 3.8 Boosts Floating Panes and Adds Automatic Themes
https://or1k.net/digests/daily-digest-2026-10-08/
• SonicWall's Portal Flunks Basic Security with Third CVSS 10.0 SSRF
• TLD Hijackers Snatch Rogue Certificates for Google Domains
• Gentoo Needs New Infrastructure Sponsors After Supporters Pull Out
• Over Half a Million Active Credentials Rot on Public GitHub Repos
• IBM and Red Hat's $5B Lightwell Fixes 400 Unknown Java Flaws
• Tensorlake NPM Package Hijacked by Self-Propagating Worm
• HPE ProLiant Gen 13 Packs AMD EPYC 9006 and Hardened iLO 8
• Tmux 3.8 Boosts Floating Panes and Adds Automatic Themes
https://or1k.net/digests/daily-digest-2026-10-08/
🥰1
or1k.net
AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
AnyDesk Linux patch hides a pre-auth root exploit, Citrix NetScaler fixes CVE-2026-107406, and Flathub reverses its blanket ban on AI-generated apps.
📰 AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
• Let's Encrypt moves to 64-day certificates in 2027
• AnyDesk's silent patch hides a pre-auth root exploit
• Critical Citrix NetScaler SAML bug opens door to RCE
• Anthropic launches free AI scanner for open-source code
• European Cyber Resilience Act makes private forks an expensive mistake
• CISA warns of Chinese state actors exploiting ancient bugs
• Flathub drops blanket AI ban for strict disclosure rules
• Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
• Let's Encrypt moves to 64-day certificates in 2027
• AnyDesk's silent patch hides a pre-auth root exploit
• Critical Citrix NetScaler SAML bug opens door to RCE
• Anthropic launches free AI scanner for open-source code
• European Cyber Resilience Act makes private forks an expensive mistake
• CISA warns of Chinese state actors exploiting ancient bugs
• Flathub drops blanket AI ban for strict disclosure rules
• Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
or1k.net
Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
Python 3.15 lands with default UTF-8 and new built-ins, KDE Frameworks 6.31.0 drops, and Woodpecker CI 3.19 adds server-enforced agent labels.
📰 Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
• Python 3.15 lands with UTF-8 default and new built-ins
• GhostAction campaign hits thousands of repos with fake security audits
• Solus starts relicensing package repos to clear path for aerynOS
• KDE Frameworks 6.31.0 arrives on schedule
• Woodpecker CI 3.19 locks down agent labels and fixes security bugs
• Glycin gets CMYK support for proper print color handling
• ICANN opens floodgates for over sixteen hundred new gTLDs
• FBI arrests another suspect linked to ShinyHunters contractor breach
• BentoPDF edits documents locally in your browser via WebAssembly
• QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
• Python 3.15 lands with UTF-8 default and new built-ins
• GhostAction campaign hits thousands of repos with fake security audits
• Solus starts relicensing package repos to clear path for aerynOS
• KDE Frameworks 6.31.0 arrives on schedule
• Woodpecker CI 3.19 locks down agent labels and fixes security bugs
• Glycin gets CMYK support for proper print color handling
• ICANN opens floodgates for over sixteen hundred new gTLDs
• FBI arrests another suspect linked to ShinyHunters contractor breach
• BentoPDF edits documents locally in your browser via WebAssembly
• QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
❤3
or1k.net
SPECviewperf 15.0.1, Let's Encrypt 64-Day Certificates and Deno: Digest for October 11, 2026
SPECviewperf 15.0.1 adds Arm support, Let's Encrypt cuts SSL lifetimes to 64 days, and Cloudflare acquires the Deno runtime team.
📰 SPECviewperf 15.0.1, Let's Encrypt 64-Day Certificates and Deno: Digest for October 11, 2026
• Cloudflare Buys Deno, Ceases Runtime Development in 2027
• Let’s Encrypt Cuts Default TLS Lifetimes to 64 Days
• Stable Kernels 7.2.10 and 6.18.56 Drop
• KDE Focuses on DAV Performance and Security in Q3 2026
• SPECviewperf 15.0.1 Adds Arm AArch64 Support on Linux
• Pebble Round 2 Starts Shipping After Delays
• VOXI UK Slashes Prices and Boosts 5G Data Allotments
https://or1k.net/digests/daily-digest-2026-10-11/
• Cloudflare Buys Deno, Ceases Runtime Development in 2027
• Let’s Encrypt Cuts Default TLS Lifetimes to 64 Days
• Stable Kernels 7.2.10 and 6.18.56 Drop
• KDE Focuses on DAV Performance and Security in Q3 2026
• SPECviewperf 15.0.1 Adds Arm AArch64 Support on Linux
• Pebble Round 2 Starts Shipping After Delays
• VOXI UK Slashes Prices and Boosts 5G Data Allotments
https://or1k.net/digests/daily-digest-2026-10-11/
or1k.net
Linux Kernel 7.3-rc7, Firefox 158 and LineageOS 24.0: Digest for October 12, 2026
Kernel 7.3-rc7 deprecates ext4 data=journal, LineageOS 24.0 arrives with Android 17, and Firefox 158 adds native JPEG XL support for Linux users.
📰 Linux Kernel 7.3-rc7, Firefox 158 and LineageOS 24.0: Digest for October 12, 2026
• Kernel 7.3-rc7 Drops Ext4 Data=Journal Mode
• LineageOS 24.0 Lands Early With Android 17
• LineageOS 24.0 Brings Material 3 And WebUSB Flashing
• Firefox 158 Adds JPEG XL And Sub-Pixel Scrolling
• Critical Bricksforge WordPress Plugin Flaw Under Attack
• SonicWall SMA 1000 Hit By Rapid Exploitation
• ProtonUp-Qt 2.16 Tweaks Linux Gaming Tooling
• Pimax Promises Native Linux VR Client And Steam Machine
• openEuler Pushes Full AI Integration Across Workflows
• AMD EPYC 8005 'Sorano' Lineup Brings Zen 5 To SP6
• Ørsted Cleans Up Network Automation With Nautobot
https://or1k.net/digests/daily-digest-2026-10-12/
• Kernel 7.3-rc7 Drops Ext4 Data=Journal Mode
• LineageOS 24.0 Lands Early With Android 17
• LineageOS 24.0 Brings Material 3 And WebUSB Flashing
• Firefox 158 Adds JPEG XL And Sub-Pixel Scrolling
• Critical Bricksforge WordPress Plugin Flaw Under Attack
• SonicWall SMA 1000 Hit By Rapid Exploitation
• ProtonUp-Qt 2.16 Tweaks Linux Gaming Tooling
• Pimax Promises Native Linux VR Client And Steam Machine
• openEuler Pushes Full AI Integration Across Workflows
• AMD EPYC 8005 'Sorano' Lineup Brings Zen 5 To SP6
• Ørsted Cleans Up Network Automation With Nautobot
https://or1k.net/digests/daily-digest-2026-10-12/
Linus Torvalds seems to be taking the vibe coding of the Linux kernel seriously. He is working on a new branch aimed at speeding up reads from the page cache.
Torvalds:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4c0f3697118eb3a708ea79175f7f07c43339bfab
Torvalds:
«The code, test programs, change reviews from the list above, and the first draft of this text were prepared using an AI code-writing assistant (Claude Code) under my guidance.».
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4c0f3697118eb3a708ea79175f7f07c43339bfab
or1k.net
GitLab CVSS 10 Flaw - Ivanti Zero-Days and Docker Hub Bug: Digest for October 13, 2026
Critical security updates fix a CVSS 10 GitLab flaw, chained Ivanti VPN zero-days, a two-year-old Docker Hub account bug, and multiple supply chain risks.
📰 GitLab CVSS 10 Flaw - Ivanti Zero-Days and Docker Hub Bug: Digest for October 13, 2026
• GitLab Patches Maximum-Severity Regex Execution Flaw
• Nix and Lix Maintainers Patch Local Root Escalation Bugs
• Attackers Chain Three Ivanti VPN Zero-Days for Root Access
• Cisco and Nvidia Push Dense Optics for AI Fabrics
• AMD Unveils Helion Rack Blueprint for Agentic AI
• NetBox Labs Expands Platform With Infrastructure Designs
• Marvell Announces Second-Generation CXL Memory Expanders
• Intel Details Crescent Island Inference GPU Specs
• Danfoss Refrigeration Controllers Hijacked in French Supermarkets
• Budget Android Phones Ship With Firmware Proxyware Malware
• LG Smart TVs Vulnerable to Local Network Root Takeover
• GitHub Tightens npm Trusted Publishing After Hijacking Risk
• SAP Discloses Critical CVSS 10 Flaw in Python Cloud SDK
• Docker Patches Critical Two-Year-Old Hub Account Bug
• Linus Torvalds Embraces AI for Kernel Optimization Work
https://or1k.net/digests/daily-digest-2026-10-13/
• GitLab Patches Maximum-Severity Regex Execution Flaw
• Nix and Lix Maintainers Patch Local Root Escalation Bugs
• Attackers Chain Three Ivanti VPN Zero-Days for Root Access
• Cisco and Nvidia Push Dense Optics for AI Fabrics
• AMD Unveils Helion Rack Blueprint for Agentic AI
• NetBox Labs Expands Platform With Infrastructure Designs
• Marvell Announces Second-Generation CXL Memory Expanders
• Intel Details Crescent Island Inference GPU Specs
• Danfoss Refrigeration Controllers Hijacked in French Supermarkets
• Budget Android Phones Ship With Firmware Proxyware Malware
• LG Smart TVs Vulnerable to Local Network Root Takeover
• GitHub Tightens npm Trusted Publishing After Hijacking Risk
• SAP Discloses Critical CVSS 10 Flaw in Python Cloud SDK
• Docker Patches Critical Two-Year-Old Hub Account Bug
• Linus Torvalds Embraces AI for Kernel Optimization Work
https://or1k.net/digests/daily-digest-2026-10-13/