Noise

Поезия и видеоигри

Миглена Николчина — Thu, 22 Oct 2026 05:56:39 +0000

В този текст Миглена Николчина предлага нещо като притурка към разговорите си със Северина Станкева върху „Индика“ и „Светлосянка“, за да покаже как и в двете игри има таен поетически ключ за интерпретацията им.

Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Alex Waddell — Thu, 22 Oct 2026 00:50:04 +0000

On October 21, 2026, the PHP project released emergency fixes for two critical remote code execution (RCE) vulnerabilities in the PHP core runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively named PHP2Shell. Both are rated 9.2 (Critical) under CVSS v4.0, and both allow an unauthenticated attacker to run code on a vulnerable server. The fixed […]

[$] LWN.net Weekly Edition for October 22, 2026

jzb — Thu, 22 Oct 2026 00:29:22 +0000

Inside this week's LWN.net Weekly Edition: Front: Android vendor hooks; Reproducible builds and kernel integrity; Rust data structures; NFS server changes; Setting no_new_privs for PID 1; Rust XArray; Rust cross-crate declarations; 7...

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

CJ Moses — Wed, 21 Oct 2026 22:36:26 +0000

Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address […]

Centralized dashboard for monitoring SES identities

Manoj Gaddam — Wed, 21 Oct 2026 21:29:10 +0000

Organizations running Amazon SES across many AWS accounts struggle to see which identities exist and whether they are verified. This post presents two solutions that collect SES identity data across every account in your AWS Organization and surface it through Amazon Athena and Amazon Quick Sight for centralized visibility.

Automate medical coding with Step Functions and Amazon Bedrock AgentCore

Sachin Doshi — Wed, 21 Oct 2026 21:26:23 +0000

Learn how to combine deterministic orchestration with bounded agentic reasoning using AWS Step Functions and the Amazon Bedrock AgentCore harness. This medical coding workflow escalates cheapest-first: a safety block-list, then exact matching, then an AI agent only for terms that need judgment, keeping every routing decision auditable.

Kara Swisher on How Tech Leaders Have Characterized the AI Threat

The Atlantic — Wed, 21 Oct 2026 20:32:27 +0000

Post Syndicated from The Atlantic original https://www.youtube.com/shorts/ubMeYLS1TrE

Today’s PHP Security Release, and How We’re Strengthening PHP Security (PHP Foundation)

corbet — Wed, 21 Oct 2026 20:20:34 +0000

The PHP Foundation has put out a blog entry explaining how the vulnerabilities disclosed today came about and why they took so long to fix. To fix the OOM problem, the PHP security team developed several competing approaches, but each came with its...

Comic for 2026.10.21 – The Rifle

Explosm.net — Wed, 21 Oct 2026 19:53:36 +0000

New Cyanide and Happiness Comic

More vulnerabilities in widely deployed software

daroc — Wed, 21 Oct 2026 17:09:24 +0000

The Node.js project has released a number of security updates to fix, among other vulnerabilities, a remote-code-execution bug affecting programs that use Brotli compression. And, in case any programmers who use compiled languages thought they could r...

Best practices for integrating IAM Roles Anywhere with your PKI

Abhishek Avinash Agawane — Wed, 21 Oct 2026 17:03:50 +0000

Using temporary credentials is a security best practice to reduce the risk from credentials getting compromised. With AWS IAM Roles Anywhere, now your workloads outside of Amazon Web Services (AWS) will be able to access AWS resources by obtaining temporary security credentials in AWS Identity and Access Management (IAM). IAM Roles Anywhere relies on public […]

NVIDIA GTC Berlin 2026 NVIDIA Intros DSX PODs and More

Ryan Smith — Wed, 21 Oct 2026 16:30:25 +0000

NVIDIA kicked off GTC 2026 with its lead keynote. Among the highlights for this year's European NVIDIA tradeshow are the DSX POD, a server-in-a-container, as well as a slew of software updates for the NVIDIA ecosystem The post NVIDIA GTC Berlin 2026 NV...

[$] Hash-based module integrity for reproducible distributions

jake — Wed, 21 Oct 2026 16:14:55 +0000

We last looked in on hash-based integrity checking for kernel modules just over a year and half ago. Since that time, the patch set has undergone multiple revisions. At the 2026 Linux Plumbers Conference (LPC), Thomas Weißschuh described the need fo...

The bridge to agent-scale Git infrastructure

Eleanor White — Wed, 21 Oct 2026 16:00:00 +0000

We moved a copy of 99.99999% of GitHub's repositories to Azure. Here's how per-reference quorums will bring over the rest, and how object storage lets reads scale independently.

The post The bridge to agent-scale Git infrastructure appeared first on The GitHub Blog.

Кафе, боб и предизборни прогнози

Александър Драганов — Wed, 21 Oct 2026 15:09:37 +0000

В навечерието на поредните избори сме, след които ще настане поредното чудене къде сбъркаха в прогнозите си социолози, политолози и анализатори. Александър Драганов обаче предварително подхожда (само)иронично, напомняйки ни, че винаги е добре да имаме едно наум, когато става въпрос за прогнози.

Intel Moves Forward at Ohio One With First Major Structural Truss Installation Arizona Fab 62 Tooling

Vic A — Wed, 21 Oct 2026 15:00:47 +0000

Intel Ohio One is making progress with truss installation as part of its construction and future wafer capacity The post Intel Moves Forward at Ohio One With First Major Structural Truss Installation Arizona Fab 62 Tooling appeared first on ServeTheHome.

Will the Tech Oligarchs Turn on Trump? (With Kara Swisher) | The David Frum Show

The Atlantic — Wed, 21 Oct 2026 15:00:24 +0000

Post Syndicated from The Atlantic original https://www.youtube.com/watch?v=cKMEtBuILD4

I Tested SafeLine WAF Against Real Attacks

BeardedTinker — Wed, 21 Oct 2026 15:00:02 +0000

Post Syndicated from BeardedTinker original https://www.youtube.com/watch?v=X-0NlbJugac

Upstreaming Tyr: Rust, DRM, and the Linux Kernel (Collabora)

corbet — Wed, 21 Oct 2026 14:58:56 +0000

The Collabora blog provides an update on Tyr, a driver for Arm Mali GPUs. One of our biggest challenges has been developing Tyr while the Rust kernel abstractions and driver interfaces are also being developed. As the driver interfaces are natural...

What Trump’s Shift Toward Russia Could Mean for Ukraine

The Atlantic — Wed, 21 Oct 2026 14:45:29 +0000

Post Syndicated from The Atlantic original https://www.youtube.com/shorts/-VSS5kL1v30