Ollama: "All Aboard Open Models", the home of local AI refocuses
Ollama publishes "All Aboard Open Models": strategic reaffirmation around open models and local experience. What this means concretely for developers.
Jul 19, 2026 4 2
Moon Festival 2026 at Starbucks Japan: The moon-viewing celebration infuses the autumn collection
Starbucks Japan unveils its Tsukimi (月見, moon-viewing) collection for autumn 2026: mugs, tumblers, and gifts inspired by the Japanese tradition from late September. A textbook example of Western seasonal marketing adapted to the Japanese lunar calendar.
Sep 3, 2026 18 3
SonicWall SMA1000: Two actively exploited 0-days, potentially chainable
The Register and The Hacker News reported on September 2, 2026, that SonicWall SMA1000 appliances are once again under active attack, with two zero-days capable of forming a full exploit chain. Immediate operational priority.
Sep 3, 2026 2 1
Researchers ask Claude to carry an RCE exploit from one PLC to another - AI as an exploit multiplier
Researchers used Claude to port a pre-auth RCE exploit from one industrial automation (PLC) model to another. The exploit porting barrier, which effectively protected less common equipment, has now fallen.
Sep 3, 2026 12 3
A malicious .git file can execute code in Claude Code, Codex, and Cursor
The Hacker News documents a new class of attack: malicious .git configurations that, when read by AI coding agents, execute attacking code. The tools meant to secure become vectors.
Sep 3, 2026 9 2
Fake software installers: disabling Windows Update and weakening Defender before intrusion
The Hacker News documents a campaign of fake software installers that begin by disabling Windows Update and reducing Microsoft Defender protections. This is no longer a classic drive-by attack: it's a preamble to a lasting intrusion.
Sep 3, 2026 2 1
An old forgotten Lenovo portal exposes 5,000 Dropbox accounts to attackers - the debt of federated identity
The Register documents how an old Lenovo login system, left in place after a forgotten SSO integration, allowed access to 5,000 Dropbox accounts. A textbook case of federated identity debt in supply chains.
Sep 3, 2026 22 3
wp2shell: Public exploits for WordPress Core RCE - patch now
The wp2shell vulnerability in WordPress Core allows unauthenticated remote code execution. Public exploits are circulating. If your installation isn't up to date, you're at risk—and 43% of the web runs on WordPress.
Sep 2, 2026 9 2
UAC-0099 incorporates a "nuclear weapon prompt" into its malware to blind AI analysts
The pro-Russian group UAC-0099 has found an original workaround against automated analysis by LLM: embedding prompts about nuclear weapons in its malware. The AI tools trigger their filters and refuse to analyze it—a reversed jailbreak that turns AI safeguards against defenders.
Sep 2, 2026 14 3
GTA VI: A 60 FPS patch in development for PS5 and Xbox Series X
Rockstar is reportedly working actively on a performance patch to make GTA VI run at 60 frames per second on PS5 and Xbox Series X. No release date has been announced, but the studio has confirmed it is taking the issue seriously and will not allow its most ambitious game to be indefinitely capped at 30 fps.
Sep 2, 2026 19 3
I rewrote 65,000 lines of Go to Rust with Fable. Invoice: $400
An engineer tasked Fable, Anthropic's specialized code transformation model, with migrating a 65,000-line Go codebase to Rust. The result? It works, it cost $400, and it raises real questions about the future of large-scale codebase migrations.
Sep 2, 2026 22 3
HollowByte: 11 bytes are enough to saturate OpenSSL server memory
The HollowByte flaw in OpenSSL allows an attacker to send an 11-byte TLS request to inflate server memory until saturation. A rarely achieved attack-to-impact ratio, affecting a library present on millions of servers.
Sep 1, 2026 10 2