The new AI powered Notepad on Windows 11 was found having a Remote Code Execution 0day

Hot take: text editors don't need network functionality

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

Got fixed fast af boi

https://x.com/chen9918b/status/2018726412317085953

Hello,

More updates being pushed to prod tomorrow. Also have some mildly interesting news to share related to something we sometimes do.

Additionally, my son will be turning 1 years old soon. Feel old yet?

Cheers,
-smelly smellington

In retrospect, the first three months of my son's life was like the dark ages. All I did was watch anime in complete silence, praying to any God that would answer my prayers, that my wife and I could sleep for just a few hours.

Nonstop anime for 90 days, per the recommendation of my peers and colleagues, was bad. I haven't watched anime ever since. I feel like I was trapped in some kind of CIA MK Ultra experiment. My brain is fried. I have this urge to move to a remote cabin and ... enjoy nature.

> see post online
> us military offensive cyber warfare division
> click profile
> they follow me
> wtf?
> theyre following me?
> is the us military using my website to study malware?
> *follow back*

I like to imagine a bunch of military bros at some fuckin base wanting updates on malware and I'm just schizo ranting about my general distrust for the United States government and spamming cat pictures

Nerds have gotten access to the ICE subreddit (???) and archived it publicly.

1. Why is there an ICE subreddit
2. Why are ICE people using Reddit
3. Why was it even accessible
4. ???

I don't understand anything

Academics nerds published a research paper a few days about LLM malware and their argument for a new classification of malware dubbed "Promptware".

X fucks up links a lot, they don't display properly, so the link to their academic paper will be in the post subsequent to this one.

As is tradition, their academic paper is just a bunch of goobers being all philosophical about shit and including a bunch of fancy pictures and graphs.

I unironically sat here and read most of this paper.

Is there argument valid?

Yes, but some of the examples provided are theoretical and have not existed in-the-wild (yet?). They do however provide real-life examples of LLM payloads which have been successful. I personally have not seen these techniques described, but they provided citations and they are indeed real.

I do malware stuff everyday (collecting, reverse engineering, development) and I have not seen any of the papers they reference. This paper has demonstrated, unironically, there is a gap right now between LLM research and malware research. In essence, we are at the point now where LLM research is now bleeding into malware research and malware nerds may have to pay more attention.

I am now a believer. LLM malware is indeed real and will become a thing. I give these academic nerds two (2) cat pictures for this interesting paper. This is the first academic paper I've read in awhile that I actually think isn't complete dog shit.

My main criticism however is they kind of butcher some malware terminology. For example, they incorrectly refer to some of this LLM malware stuff as Polymorphic, but this is not polymorphic ... unless we get really, really, really flexible with definition of polymorphic malware and we make it more akin to high-level class inheritance polymorphism. It doesn't really matter that much though because I understand what they're trying to convey.

Research paper: https://arxiv.org/pdf/2601.09625

Hello,

Last year people who attended DEFCON wanted to gift things to me. I have received them. I do not understand this sticker one of you sent me.

What does "Peg A Fed" mean?

Hello,

I have received more things from DEFCON. I appreciate the gifts all of you have sent.

Thank you, XINTRA, for the sticker of the anime lady with obnoxiously large breasts. I don't know where I'll place it, but I appreciate it.

> be me
> have malware idea
> plug phone into pc
> malware detects phone
> automagically steals data off phone
> spend time working on it
> deal with all sorts of dumb shit c winapi
> fails
> ???
> fails
> look inside
> The phone must be in File Transfer (MTP) mode and authorized for WPD (Windows Portable Device) to work

guess who should have read the documentation before doing a bunch of work? (ill give you a hint, its me)

I can't even tell you how many times I've explored a malware concept to just:

1. Realize I should have read the documentation
2. Realize Google Project Zero already reversed it
3. Realize some schizo on UnknownCheats reversed it
4. Fail (successfully!)

Yeah, so pretty much, like, there is this really sketchy company in Israel named "Paragon". Paragon sells a "product" called GRAPHITE.

Let me explain the background and why this is very silly.

GRAPHITE spyware which allows "customers" to remotely access peoples cell phones and monitor their instant messaging applications such as WhatsApp

It is spyware. It is sometimes called Mercenary Spyware because it is primarily used by governments to spy on political enemies, journalists, and activists.

Very little is known about Paragon, GRAPHITE, and their "customers". However, it was publicly noted by the Trump administration in January, 2025, to be purchased by the United States government and to be used to aid ICE.

Furthermore, in September 2025 the Trump administration noted the usage of Graphite to aid the United States against "domestic terrorist organizations" such as "ANTIFA".

ICE acting director Todd Lyons noted using GRAPHITE to monitor anti-ICE protestors to track "ringleaders and professional agitators".

Citizen Lab and other civil rights organizations have documented the usage of GRAPHITE against individuals in Australia, Canada, Cyprus, Denmark, Israel, Singapore and (unsurprisingly) the United States. It is believed the Canadian government actively uses GRAPHITE in Ontario.

Okay, so why does all of this matter? Yeah, it's super fucked up. But today representatives from Paragon accidentally leaked GRAPHITE screenshots ... ON LINKEDIN. Dawg, that image in the background IS GOVERNMENT FUCKING SPYWARE

It shows phone numbers in Czechia, apps, accounts, media on the phone, "interception status", and phone numbers extracted. THEY LEAKED IT BY ACCIDENT ON LINKEDIN WHILE TAKING SELFIES

If you want to read more about Paragon, GRAPHITE, and governments (illegally) using Mercenary Spyware, read this paper:

https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/

Oh, I'm also really, really, really, sorry to DrWhax. This is his photo he took from LinkedIn and he was the first to note it. I got lost in the sauce and forgot to tag him and give him credit.

I'm sorry, DrWhax. That is 100% my bad. When I saw your post I lost my mind.