or1k.net
AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
AnyDesk Linux patch hides a pre-auth root exploit, Citrix NetScaler fixes CVE-2026-107406, and Flathub reverses its blanket ban on AI-generated apps.
📰 AnyDesk Linux Exploit, NetScaler CVE-2026-107406 and Flathub AI Policy: Digest for October 9, 2026
• Let's Encrypt moves to 64-day certificates in 2027
• AnyDesk's silent patch hides a pre-auth root exploit
• Critical Citrix NetScaler SAML bug opens door to RCE
• Anthropic launches free AI scanner for open-source code
• European Cyber Resilience Act makes private forks an expensive mistake
• CISA warns of Chinese state actors exploiting ancient bugs
• Flathub drops blanket AI ban for strict disclosure rules
• Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
• Let's Encrypt moves to 64-day certificates in 2027
• AnyDesk's silent patch hides a pre-auth root exploit
• Critical Citrix NetScaler SAML bug opens door to RCE
• Anthropic launches free AI scanner for open-source code
• European Cyber Resilience Act makes private forks an expensive mistake
• CISA warns of Chinese state actors exploiting ancient bugs
• Flathub drops blanket AI ban for strict disclosure rules
• Seagate tries to squeeze Toshiba out of the hard drive market
https://or1k.net/digests/daily-digest-2026-10-09/
or1k.net
Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
Python 3.15 lands with default UTF-8 and new built-ins, KDE Frameworks 6.31.0 drops, and Woodpecker CI 3.19 adds server-enforced agent labels.
📰 Python 3.15, KDE Frameworks 6.31.0 and Woodpecker CI 3.19: Digest for October 10, 2026
• Python 3.15 lands with UTF-8 default and new built-ins
• GhostAction campaign hits thousands of repos with fake security audits
• Solus starts relicensing package repos to clear path for aerynOS
• KDE Frameworks 6.31.0 arrives on schedule
• Woodpecker CI 3.19 locks down agent labels and fixes security bugs
• Glycin gets CMYK support for proper print color handling
• ICANN opens floodgates for over sixteen hundred new gTLDs
• FBI arrests another suspect linked to ShinyHunters contractor breach
• BentoPDF edits documents locally in your browser via WebAssembly
• QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
• Python 3.15 lands with UTF-8 default and new built-ins
• GhostAction campaign hits thousands of repos with fake security audits
• Solus starts relicensing package repos to clear path for aerynOS
• KDE Frameworks 6.31.0 arrives on schedule
• Woodpecker CI 3.19 locks down agent labels and fixes security bugs
• Glycin gets CMYK support for proper print color handling
• ICANN opens floodgates for over sixteen hundred new gTLDs
• FBI arrests another suspect linked to ShinyHunters contractor breach
• BentoPDF edits documents locally in your browser via WebAssembly
• QML Quick Editor plugin lands fully integrated in Qt Creator
https://or1k.net/digests/daily-digest-2026-10-10/
❤3
or1k.net
SPECviewperf 15.0.1, Let's Encrypt 64-Day Certificates and Deno: Digest for October 11, 2026
SPECviewperf 15.0.1 adds Arm support, Let's Encrypt cuts SSL lifetimes to 64 days, and Cloudflare acquires the Deno runtime team.
📰 SPECviewperf 15.0.1, Let's Encrypt 64-Day Certificates and Deno: Digest for October 11, 2026
• Cloudflare Buys Deno, Ceases Runtime Development in 2027
• Let’s Encrypt Cuts Default TLS Lifetimes to 64 Days
• Stable Kernels 7.2.10 and 6.18.56 Drop
• KDE Focuses on DAV Performance and Security in Q3 2026
• SPECviewperf 15.0.1 Adds Arm AArch64 Support on Linux
• Pebble Round 2 Starts Shipping After Delays
• VOXI UK Slashes Prices and Boosts 5G Data Allotments
https://or1k.net/digests/daily-digest-2026-10-11/
• Cloudflare Buys Deno, Ceases Runtime Development in 2027
• Let’s Encrypt Cuts Default TLS Lifetimes to 64 Days
• Stable Kernels 7.2.10 and 6.18.56 Drop
• KDE Focuses on DAV Performance and Security in Q3 2026
• SPECviewperf 15.0.1 Adds Arm AArch64 Support on Linux
• Pebble Round 2 Starts Shipping After Delays
• VOXI UK Slashes Prices and Boosts 5G Data Allotments
https://or1k.net/digests/daily-digest-2026-10-11/
or1k.net
Linux Kernel 7.3-rc7, Firefox 158 and LineageOS 24.0: Digest for October 12, 2026
Kernel 7.3-rc7 deprecates ext4 data=journal, LineageOS 24.0 arrives with Android 17, and Firefox 158 adds native JPEG XL support for Linux users.
📰 Linux Kernel 7.3-rc7, Firefox 158 and LineageOS 24.0: Digest for October 12, 2026
• Kernel 7.3-rc7 Drops Ext4 Data=Journal Mode
• LineageOS 24.0 Lands Early With Android 17
• LineageOS 24.0 Brings Material 3 And WebUSB Flashing
• Firefox 158 Adds JPEG XL And Sub-Pixel Scrolling
• Critical Bricksforge WordPress Plugin Flaw Under Attack
• SonicWall SMA 1000 Hit By Rapid Exploitation
• ProtonUp-Qt 2.16 Tweaks Linux Gaming Tooling
• Pimax Promises Native Linux VR Client And Steam Machine
• openEuler Pushes Full AI Integration Across Workflows
• AMD EPYC 8005 'Sorano' Lineup Brings Zen 5 To SP6
• Ørsted Cleans Up Network Automation With Nautobot
https://or1k.net/digests/daily-digest-2026-10-12/
• Kernel 7.3-rc7 Drops Ext4 Data=Journal Mode
• LineageOS 24.0 Lands Early With Android 17
• LineageOS 24.0 Brings Material 3 And WebUSB Flashing
• Firefox 158 Adds JPEG XL And Sub-Pixel Scrolling
• Critical Bricksforge WordPress Plugin Flaw Under Attack
• SonicWall SMA 1000 Hit By Rapid Exploitation
• ProtonUp-Qt 2.16 Tweaks Linux Gaming Tooling
• Pimax Promises Native Linux VR Client And Steam Machine
• openEuler Pushes Full AI Integration Across Workflows
• AMD EPYC 8005 'Sorano' Lineup Brings Zen 5 To SP6
• Ørsted Cleans Up Network Automation With Nautobot
https://or1k.net/digests/daily-digest-2026-10-12/
Linus Torvalds seems to be taking the vibe coding of the Linux kernel seriously. He is working on a new branch aimed at speeding up reads from the page cache.
Torvalds:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4c0f3697118eb3a708ea79175f7f07c43339bfab
Torvalds:
«The code, test programs, change reviews from the list above, and the first draft of this text were prepared using an AI code-writing assistant (Claude Code) under my guidance.».
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4c0f3697118eb3a708ea79175f7f07c43339bfab
or1k.net
GitLab CVSS 10 Flaw - Ivanti Zero-Days and Docker Hub Bug: Digest for October 13, 2026
Critical security updates fix a CVSS 10 GitLab flaw, chained Ivanti VPN zero-days, a two-year-old Docker Hub account bug, and multiple supply chain risks.
📰 GitLab CVSS 10 Flaw - Ivanti Zero-Days and Docker Hub Bug: Digest for October 13, 2026
• GitLab Patches Maximum-Severity Regex Execution Flaw
• Nix and Lix Maintainers Patch Local Root Escalation Bugs
• Attackers Chain Three Ivanti VPN Zero-Days for Root Access
• Cisco and Nvidia Push Dense Optics for AI Fabrics
• AMD Unveils Helion Rack Blueprint for Agentic AI
• NetBox Labs Expands Platform With Infrastructure Designs
• Marvell Announces Second-Generation CXL Memory Expanders
• Intel Details Crescent Island Inference GPU Specs
• Danfoss Refrigeration Controllers Hijacked in French Supermarkets
• Budget Android Phones Ship With Firmware Proxyware Malware
• LG Smart TVs Vulnerable to Local Network Root Takeover
• GitHub Tightens npm Trusted Publishing After Hijacking Risk
• SAP Discloses Critical CVSS 10 Flaw in Python Cloud SDK
• Docker Patches Critical Two-Year-Old Hub Account Bug
• Linus Torvalds Embraces AI for Kernel Optimization Work
https://or1k.net/digests/daily-digest-2026-10-13/
• GitLab Patches Maximum-Severity Regex Execution Flaw
• Nix and Lix Maintainers Patch Local Root Escalation Bugs
• Attackers Chain Three Ivanti VPN Zero-Days for Root Access
• Cisco and Nvidia Push Dense Optics for AI Fabrics
• AMD Unveils Helion Rack Blueprint for Agentic AI
• NetBox Labs Expands Platform With Infrastructure Designs
• Marvell Announces Second-Generation CXL Memory Expanders
• Intel Details Crescent Island Inference GPU Specs
• Danfoss Refrigeration Controllers Hijacked in French Supermarkets
• Budget Android Phones Ship With Firmware Proxyware Malware
• LG Smart TVs Vulnerable to Local Network Root Takeover
• GitHub Tightens npm Trusted Publishing After Hijacking Risk
• SAP Discloses Critical CVSS 10 Flaw in Python Cloud SDK
• Docker Patches Critical Two-Year-Old Hub Account Bug
• Linus Torvalds Embraces AI for Kernel Optimization Work
https://or1k.net/digests/daily-digest-2026-10-13/
or1k.net
Linux vhost Flaw - Microsoft 1413 Patches and Epic Launcher: Digest for October 14, 2026
Critical Linux vhost kernel flaw CVE-2026-74580, Microsoft's record 1,413 patches, and Epic Games bringing a native Linux launcher and Fortnite.
📰 Linux vhost Flaw - Microsoft 1413 Patches and Epic Launcher: Digest for October 14, 2026
• Linux vhost Bug Gives Local Root and Guest Escapes
• Microsoft Ships Record 1,413 Patches in Massive Drop
• curl Patches Critical HTTP-2 Upload Use-After-Free
• CISA Urges Ivanti Updates as Honeypots Log Exploits
• IonQ Buys Elisity for $1-Point-2 Billion in PQC Push
• DARPA Awards $300 Million Each for Quantum Hardware Testing
• Linux Lockdown, Swap, and the Reality of Root
• AI Model Builds Working Chrome Full-Chain Exploit in Days
• Epic Games Launcher Preview Brings Native Linux Support
https://or1k.net/digests/daily-digest-2026-10-14/
• Linux vhost Bug Gives Local Root and Guest Escapes
• Microsoft Ships Record 1,413 Patches in Massive Drop
• curl Patches Critical HTTP-2 Upload Use-After-Free
• CISA Urges Ivanti Updates as Honeypots Log Exploits
• IonQ Buys Elisity for $1-Point-2 Billion in PQC Push
• DARPA Awards $300 Million Each for Quantum Hardware Testing
• Linux Lockdown, Swap, and the Reality of Root
• AI Model Builds Working Chrome Full-Chain Exploit in Days
• Epic Games Launcher Preview Brings Native Linux Support
https://or1k.net/digests/daily-digest-2026-10-14/
or1k.net
CVE-2026-99999 Kernel Fix, Ultra Ethernet 1.1, Next.js RCE: Digest for October 16, 2026
Linux stable kernels patch critical CVE-2026-99999 PwnEscape bug, Ultra Ethernet 1.1 targets AI clustering, and Next.js patches out-of-band remote code flaws.
📰 CVE-2026-99999 Kernel Fix, Ultra Ethernet 1.1, Next.js RCE: Digest for October 16, 2026
• Seven Stable Kernels Patch Critical Checksum Bug
• Ultra Ethernet 1.1 Strips IP Overhead for AI Fabrics
• PwnEscape Breaches Firecracker VM Boundaries via IPv4
• Palo Alto Networks Patches Active Management Plane RCE
• Drupal Plugs Unchecked Region Callbacks in Field UI
• Next.js Ships Emergency Fixes for Caching and SVG Bugs
• NGINX Updates Address TLS Session Bypass and Buffer Overflows
• Nextcloud Collabora CODE App Yields Unauthenticated Shells
• Cisco Secure Email Gateway Under Attack via File Reputation
• Ahsay Issues Fresh Hotfixes After Incomplete Backup RCE Patch
• Langflow Command Injection Probed Across Over 1,400 Honeypots
• Epic Games Rebuilds Linux Anti-Cheat Using eBPF
• KDE Marks 30 Years with a Retrospective Documentary
• Automating Hardware Reverse Engineering with KVM and usbmon
• Darrick Wong Steps Down from Kernel IOmap Maintenance
https://or1k.net/digests/daily-digest-2026-10-16/
• Seven Stable Kernels Patch Critical Checksum Bug
• Ultra Ethernet 1.1 Strips IP Overhead for AI Fabrics
• PwnEscape Breaches Firecracker VM Boundaries via IPv4
• Palo Alto Networks Patches Active Management Plane RCE
• Drupal Plugs Unchecked Region Callbacks in Field UI
• Next.js Ships Emergency Fixes for Caching and SVG Bugs
• NGINX Updates Address TLS Session Bypass and Buffer Overflows
• Nextcloud Collabora CODE App Yields Unauthenticated Shells
• Cisco Secure Email Gateway Under Attack via File Reputation
• Ahsay Issues Fresh Hotfixes After Incomplete Backup RCE Patch
• Langflow Command Injection Probed Across Over 1,400 Honeypots
• Epic Games Rebuilds Linux Anti-Cheat Using eBPF
• KDE Marks 30 Years with a Retrospective Documentary
• Automating Hardware Reverse Engineering with KVM and usbmon
• Darrick Wong Steps Down from Kernel IOmap Maintenance
https://or1k.net/digests/daily-digest-2026-10-16/