A new tool called coldframe, built as a single standalone Python file, impersonates Danfoss AK-SM 800A and Copeland/Dixell XWEB EVO refrigeration controllers to lure attackers. It replicates real device details like TLS settings, HTTP headers, login flows, and known exploit paths, logging credentials, exploit attempts and attacker actions without exposing any real system. The project follows reports of 2026 attacks in which hackers used default passwords and unpatched firmware to break into internet-facing refrigeration supervisors across Europe and trigger forced defrost cycles.
github.com
· 2026-11-07
The Center for Renewing America, a think tank founded by OMB Director Russell Vought, published a post arguing that certain winning Democratic candidates—those it links to a supposed alliance between progressives and Muslims—could legally be denied seats in Congress. Legal scholar Richard Pildes called the argument a distortion of established norms for partisan ends. The CRA did not respond to requests for comment.
wired.com
· 2026-11-02
Mercedes driver Kimi Antonelli clinched his first Formula 1 World Drivers' Championship at the Mexico City Grand Prix, becoming the sport's youngest-ever title winner just months after turning 20. The race itself saw chaos at altitude, with Ferrari again losing a likely win—this time to Red Bull—while Haas made a last-minute driver swap, both Aston Martins retired in sync, and Cadillac Racing suffered wheel failures.
arstechnica.com
· 2026-11-02
Security researchers disclosed a flaw in Brotli decoder versions 1.0.3 through 1.2.0 that lets maliciously crafted compressed data trigger an out-of-bounds write, potentially causing crashes, memory leaks, or remote code execution. The bug, rated 9.2 Critical by GitHub, affects any software built on Google's C decoder, including Node.js's built-in fetch and zlib bindings, Python's requests and aiohttp libraries, and frameworks like Express and body-parser that decompress Brotli-encoded data.
broccoli2shell.com
· 2026-10-24
Microsoft confirmed that Windows Server 2016, originally released in October 2016, will receive its final security update in January 2027, after which no further patches will be issued. The cutoff applies to all editions, including Datacenter, Essentials, MultiPoint Premium and Standard, and will also end support for Essentials-specific features like Remote Web Access.
bleepingcomputer.com
· 2026-10-23
Microsoft says Windows Server 2025 will gain Quick Machine Recovery (QMR) once the October 2026 security update is installed, extending a feature previously limited to Windows 11. QMR boots a failing machine into the Windows Recovery Environment, runs a recovery tool, and sends crash data to Microsoft so it can remotely remove faulty drivers or updates. On Server 2025, cloud-based remediation is off by default and must be turned on through Group Policy settings.
bleepingcomputer.com
· 2026-10-20
Microsoft confirmed that Windows Server 2022 passed its mainstream support deadline on October 13, 2026, with the October update being the last mainstream security release. The OS now moves into extended support, which provides free monthly security updates through October 14, 2031. Microsoft also extended hotpatching for Datacenter: Azure Edition systems until October 2027.
bleepingcomputer.com
· 2026-10-15
Microsoft has told IT administrators that security certificates used by Windows Update services will expire on preset dates, and devices that don't install specific updates beforehand will lose access to future updates. Windows 11 24H2 and Windows Server 2025 certificates expire June 19, 2027, requiring the September 2025 update or later; other supported Windows 11, Windows 10, and Windows Server 2022 versions share that expiration but need the July 2026 update. LTSB/LTSC releases of Windows 10 Enterprise 2019 and Windows Server 2016/2019 face an earlier May 17, 2027 cutoff.
techspot.com
· 2026-10-10
A research team has published the implementation of LittleBit, a method accepted at NeurIPS 2025, which compresses large language model weights into a sub-1-bit range, down to 0.1 bits per weight, by factorizing weight matrices into binarized low-rank latent factors with learned scaling. A follow-up method, LittleBit-2 (accepted at ICML 2026), adds an optional initialization technique called Joint Iterative Quantization that aligns latent factors geometrically before training, without changing the model's inference-time structure. The codebase supports models including OPT, Llama, Phi-4, Qwen2.5, QwQ, Gemma 2/3, and Qwen3.
github.com
· 2026-10-08
Debian's security team published advisory DSA-6528-1, addressing nearly 90 CVEs discovered in the Linux kernel. The advisory, issued by Salvatore Bonaccorso, lists vulnerabilities spanning multiple kernel subsystems and recommends users update their systems to the patched packages.
lwn.net
· 2026-10-01
Researchers identified a double-fetch flaw in Avast's kernel driver that can lead to a pool overflow, potentially allowing code execution outside the antivirus sandbox. The flaw involves multiple reads of the same user-supplied data, which can be manipulated between fetches. Recent Windows updates mitigate this issue by enforcing user-mode access checks, reducing the exploit's viability.
safateam.com
· 2026-09-25
Copper has released an updated version of its Charlie induction stove, boosting the broiler to 3,000 watts, increasing induction zone power to 3kW, and cutting oven preheat time to 3:50 for 350°F. The new model also adds compatibility with 240-volt outlets in addition to 120-volt, and Copper has partnered with Miele to manufacture the ranges at a factory in Alabama.
engadget.com
· 2026-09-24
GoKawiil