Skip to content

Technology and security alerts

Each alert sums up the news and says what to do.

Recent alerts

  • October 8, 2026 · dl.acm.org

    Stream computing: Brook’s model for GPUs

    The 2004 paper describes kernels processing stream elements as an alternative to graphics APIs and shaders, a model that can inform evaluations of GPU workloads.

  • October 8, 2026 · seclists.org

    CVE-2026-104380: routing flaw in Punk for Perl

    Advisory published on the oss-sec mailing list on October 5, 2026: Punk for Perl versions 0.48 through releases before 0.55 may route Extended CONNECT to GET routes without validating Origin.

  • October 8, 2026 · seclists.org

    CVE-2026-88816: Update Perl DBI

    An advisory published on September 28, 2026, reports that Perl DBI versions earlier than 1.654 incorrectly handle numeric values in FetchHashKeyName.

  • October 8, 2026 · seclists.org

    Apache YuniKorn: admission check bypass

    An advisory published on October 7, 2026, reports that Apache YuniKorn 1.9.0 and earlier do not check user labels and annotations for workload UPDATE operations, allowing admission controls to be bypassed. The reported severity is low (CVSS 4.0: 2.0).

  • October 8, 2026 · blog.talosintelligence.com

    Defenses that undermine adversary advantages

    In an article published on October 1, 2026, Cisco Talos highlights deception techniques, behavioral detection, and controls on legitimate tools to make attackers’ operations harder.

  • October 8, 2026 · universe.roboflow.com

    Detecting basketball elements with computer vision

    A September 24, 2025 publication describes fine-tuning a detection model to identify players, jersey numbers, referees, the ball, and the hoop in basketball footage.

  • October 8, 2026 · x.com

    Short reasoning hints for evaluating AI systems

    A paper published on October 5, 2025 describes a hint generator and a solver trained with reinforcement learning. For mathematics, it reports 44% higher accuracy on AIME 2025 than RL with long chains.

  • October 8, 2026 · seclists.org

    Vulnerability disclosure for cloud providers

    In a post dated October 4, 2026, oss-sec proposes a disclosure list for cloud and VPS hosting providers that do not participate in Linux distribution lists.

  • October 8, 2026 · github.com

    DocEx tests defenses against document exfiltration

    Published on April 20, 2025, the text describes DocEx, an APT emulation tool that simulates the exfiltration of DOCX, PPTX, XLSX, and PDF files to assess security defenses.

  • October 8, 2026 · storagereview.com

    Dream Router 7: Wi-Fi 7 and 10GbE in one gateway

    On June 4, 2025, StorageReview published an analysis of the Dream Router 7 integrated gateway, featuring Wi-Fi 7, 10GbE, PoE, UniFi apps, and security tools for homes and small and medium-sized businesses.

  • October 8, 2026 · huggingface.co

    Reflective prompt optimization with DSPy GEPA

    A cookbook published on October 16, 2025 presents reflective prompt optimization with DSPy GEPA and reports an 11% accuracy gain on NuminaMath-1.5 for less than US$0.50 in total.

  • October 8, 2026 · elastic.co

    Elastic automates Linux endpoint configuration without MDM

    In an article published on September 29, 2026, Elastic Security Labs describes a 68-line workflow that checks Linux endpoints every six hours and applies managed configurations without duplicating actions.

  • October 8, 2026 · arxiv.org

    ESFT targets task-relevant experts in sparse LLMs

    Published on July 5, 2024, the paper studies parameter-efficient fine-tuning for Mixture-of-Experts models and presents ESFT, which trains experts selected for their relevance to the task.

  • October 8, 2026 · x.com

    Study compares attention in 13 LLMs, with 17% performing best

    Published on October 12, 2025, the study reports experiments training 13 LLMs with different proportions of conventional attention and DeltaNet linear attention. The configuration with 17% attention—two of 12 layers—achieved the best result.

  • October 8, 2026 · therecord.media

    New NetScaler alert calls for an exposure review

    The Record reports that the United States and Australia warned of a newly observed issue in customer-managed NetScaler deployments, distinct from the vulnerabilities disclosed the previous week.

  • October 8, 2026 · hackmosphere.fr

    Defender evasion: assessing and improving detections

    Published on April 19, 2025, the article describes a two-part series on Windows Defender evasion, including direct syscalls and XOR. Part one provides basic experimental code and points to defensive uses in evaluating antivirus defenses and improving detections.

  • October 8, 2026 · x.com

    Expanding queries with knowledge graphs

    A publication dated November 13, 2024 describes a workflow combining entities extracted from queries, retrieved documents, and knowledge-graph relationships to generate contextual expansions.

  • October 8, 2026 · x.com

    Extracting text from PDFs with olmOCR

    In a post published on February 25, 2025, AllenAI introduced olmOCR, an open-source tool for extracting plain text from different types of PDFs that can run on a GPU.

  • October 8, 2026 · huggingface.co

    Multilingual speech: evaluating FireRedTTS 2

    Published on September 17, 2025, the article presents an open speech synthesis model supporting long-form conversation, multilingual voice cloning, and low-latency generation.

  • October 8, 2026 · seclists.org

    Apache Directory LDAP API flaw can consume CPU indefinitely

    An advisory published on the oss-sec mailing list on October 2, 2026 warns that malformed telephone numbers can keep one CPU core busy indefinitely in Apache Directory LDAP API versions earlier than 2.1.9.

  • October 8, 2026 · seclists.org

    mod_dav_fs flaw may corrupt WebDAV data

    The advisory published by oss-sec on October 1, 2026 describes a moderate flaw in Apache HTTP Server through version 2.4.68, exploitable by authenticated WebDAV clients with write access.

  • October 8, 2026 · seclists.org

    XS-Parse-Keyword flaw affects versions 0.40 to 0.49

    An advisory published by oss-sec on September 28, 2026 describes CVE-2026-85644: XS::Parse::Infix treats a number as an array reference in versions 0.40 to 0.49 of the XS-Parse-Keyword distribution.

  • October 8, 2026 · ubuntu.com

    ImageMagick flaws call for a review of Ubuntu systems

    Ubuntu Security’s USN-8859-1 advisory, published on September 30, 2026, describes image-processing flaws that may cause denial of service and, in one case, exposure of sensitive information.

Let's assess your project

I reply with scope and a proposal.

eu@wendelmaques.com

Looking for something else?Frequently asked questionsArticlesContact