Xbox brings four OG games to PC via its backward compatibility program
Microsoft extends its Xbox backward compatibility program to PC: four games from the "OG Xbox" era (2001-2005) arrive on Windows via the Xbox app.
Jul 22, 2026 15 3
Cold Noodle Cup: Nissin Launches the First-Ever "Cold Water" Cup Noodle for Its 55th Anniversary
Nissin (Nissin Food Products) is celebrating the 55th anniversary of Cup Noodle with a world first: a hiyashi (cold) version that can be prepared with cold water only - an unprecedented technical feat in the range, designed for the extreme summers of the archipelago.
Jul 21, 2026 11 3
SonicWall SMA1000: Two actively exploited 0-days, potentially chainable
The Register and The Hacker News reported on September 2, 2026, that SonicWall SMA1000 appliances are once again under active attack, with two zero-days capable of forming a full exploit chain. Immediate operational priority.
Sep 3, 2026 2 1
A malicious .git file can execute code in Claude Code, Codex, and Cursor
The Hacker News documents a new class of attack: malicious .git configurations that, when read by AI coding agents, execute attacking code. The tools meant to secure become vectors.
Sep 3, 2026 9 2
UAC-0099 incorporates a "nuclear weapon prompt" into its malware to blind AI analysts
The pro-Russian group UAC-0099 has found an original workaround against automated analysis by LLM: embedding prompts about nuclear weapons in its malware. The AI tools trigger their filters and refuse to analyze it—a reversed jailbreak that turns AI safeguards against defenders.
Sep 2, 2026 14 3
HollowByte: 11 bytes are enough to saturate OpenSSL server memory
The HollowByte flaw in OpenSSL allows an attacker to send an 11-byte TLS request to inflate server memory until saturation. A rarely achieved attack-to-impact ratio, affecting a library present on millions of servers.
Sep 1, 2026 10 2
Neither GCC nor Clang are fully compliant with the C++ standard—and this is structural.
A study demonstrates that neither GCC nor Clang fully comply with the ISO C++ standard. Not a single bug fixable in one pull request—it's a structural observation about the two compilers powering most C++ projects worldwide.
Sep 1, 2026 14 3
8,300 Gitea forges exposed to RCE: is your source code on the list?
Thousands of teams self-hosting Gitea to retain control of their code are discovering their forge is vulnerable to remote code execution. The real issue: no one patches the "peripheral" tools.
Aug 31, 2026 18 3
FBI dismantles QTFY infrastructure: China's hacking tools targeting NASA, DOE, and the U.S. Senate
The FBI has just seized the QTFY infrastructure, an arsenal of offensive tools attributed to actors linked to Chinese intelligence, used to target networks of NASA, the Department of Energy, and the U.S. Senate. A major dismantling that reveals the extent of the attack surface of critical U.S. infrastructures.
Aug 27, 2026 5 2
AWS acquires DuckLabs: DuckDB, the most beloved in-process analytical database by developers, joins Amazon
Amazon Web Services has just announced the acquisition of DuckLabs, the team behind DuckDB—the open-source in-process OLAP database that has established itself in just a few years as the go-to analytical tool in the data ecosystem. This acquisition raises questions about the future of the project's open-source model.
Aug 27, 2026 7 2
SilentShield 2026 Exercises: CISA Red Team Penetrates Two Critical Infrastructures, One Without Any Detection
The CISA releases the results of its SILENTSHIELD exercises: two U.S. critical infrastructure organizations tested, two successful compromises. One issued no alerts. Meanwhile, over 100 U.S. water systems were attacked in July 2026.
Aug 27, 2026 2 1
Claude Code switches to Bun (written in Rust): what this means for performance
Claude Code, the official CLI from Anthropic, now uses Bun as its JavaScript runtime—Bun itself is primarily written in Zig (with some Rust components). A technical choice that highlights the shift of the JS stack toward high-performance runtimes.
Aug 21, 2026 13 3