The End of the Easy Plan B: Latin America Now Wants Your Capital or Your Time Latin America increasingly wants capital or time. For a Plan B without relocating, investing is now the way in, David Lincoln argues.

IMI Daily

The End of the Easy Plan B: Latin America Now Wants Your Capital or Your Time - IMI Daily

Latin America increasingly wants capital or time. For a Plan B without relocating, investing is now the way in, David Lincoln argues.

Hot Crazy Matrix A Man's Guide to Women

Run It Local: The LLM Download Directory Where to download open-weight LLMs to run on your own hardware: torrent and magnet indexes, official hubs, mirrors, one-command runtimes, trusted GGUF quantizers, and the opsec to do it safely.

Closed Network Privacy Podcast

Run It Local: Where to Download LLMs (Torrents, Hubs, Mirrors) | Closed Network

Where to download open-weight LLMs to run on your own hardware: torrent and magnet indexes, official hubs, mirrors, one-command runtimes, trusted G...

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

The Hacker News

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release https://www.wordfence.com/blog/2026/10/wordpress-7-1-4-security-release-rce/

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

Yesterday, Anthropic were compromised via a Cursor VS Code extension used by tens of millions of developers for Claude access was delivering a remote access trojan via an SSH reverse backdoor. The malware allowed hands on and automated remote access to developer laptops and desktops, in a supply chain attack. https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2

PSA for anyone running a Linux server, node, or relay CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.

Derek Ross (npub18a…tp424) on Nostr

Short Text Note by Derek Ross

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

GitHub

GitHub - eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC: Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.

Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environment...

Preklepnete sa v daňovom priznaní pri deklarácii krypta a následne vám domov nabehnú teroristi. (k prepojeniu francúzskeho daňového úradu priamo s organizovaným zločinom). A na Slovensku to fakt nebude lepšie.

TokenPost

Googly Says Tax Error Led to French Home Invasion Over 660 BTC | TokenPost

Googly said the father held 0.066 BTC; two members of the group were sentenced Oct. 16 to three years and 18 months in prison.

Journal du Coin

Crypto rapt de Juilly en France : ils visaient 660 bitcoins, la famille n’en avait que 0,066

Une famille de Juilly agressée pour 660 bitcoins au lieu de 0,066 : deux condamnations à Meaux après ce crypto rapt nourri par une fuite fiscale.

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

The Hacker News

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

A compromised Claude Code VS Code extension added an SSH key, installed persistence, and sent host details before version 2.1.314 replaced it.

eMudhra Intermediate CA Compromise The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

we-have-a-problem.com

eMudhra Intermediate CA Compromise

The private keys of eight eMudhra intermediate CA certificates, trusted by major root programs, have been compromised. Check whether your client is...

France's Open-Air Incinerators: The Uncounted Toxic Toll Of Annual Street Protests https://www.zerohedge.com/medical/frances-open-air-incinerators-uncounted-toxic-toll-annual-street-protests

Marx, Musk and the death of meaning Universal basic income would not free us but enslave us https://thecritic.co.uk/marx-musk-and-the-death-of-meaning/

A coding-agent skill that turns your agent into a security auditor. It orchestrates isolated agents through reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting.

GitHub

GitHub - cloudflare/security-audit-skill: A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings - cloudflare/security-audit-skill

Štyria americkí vojaci prebehli v 60. rokoch do Severnej Kórey. Späť sa dostal len jeden, po 39 rokoch. V januári 1965 vypil seržant Charles Jenkins desať pív a vošiel do mínového poľa na najstráženejšej hranici sveta. Myslel si, že ho Severná Kórea pošle do Moskvy a odtiaľ domov. Namiesto toho žil osem rokov s ďalšími tromi americkými dezertérmi v jednej izbe, študoval spisy Kim Ir-sena a hrali „zlých Američanov“ v propagandistických filmoch. Potom im režim našiel manželky. Unesené. 🇯🇵 Japonku Hitomi Soga uniesli agenti v roku 1978 z ostrova Sado aj s matkou. O matke sa dodnes nevie nič. 🇷🇴 Rumunskú maliarku Doinu Bumbea podľa Jenkinsa uniesli, keď študovala v Taliansku. Rodina sa o jej osude dozvedela až v roku 2006. 🇹🇭 Thajčanku Anochu Panjoy uniesli z Macaa. Prečo by sa diktatúra namáhala zháňať cudzincom cudzinky? Jenkins bol do smrti presvedčený, že išlo o „chov“ špiónov: deti so západným výzorom, vychované v systéme a pripravené pôsobiť v zahraničí. Jeho dcéry naozaj skončili na elitnej jazykovej škole. Jenkinsa a Sogu spojila nenávisť k režimu a časom sa do seba zamilovali. Každý večer sa trikrát pobozkali, aby nezabudli, kým naozaj sú. V roku 2002 Kim Čong-il priznal únosy Japoncov a Soga sa vrátila domov. O dva roky neskôr Japonsko dostalo von aj Jenkinsa s dcérami. Dožil na Sade, kúsok od miesta únosu, ako predavač v obchode miestneho múzea. Dresnok zostal. Zomrel v Pchjongjangu v roku 2016. Jeho synovia s unesenou Rumunkou dnes v uniformách kórejskej armády vystupujú v propagandistických videách a vyhrážajú sa Amerike.

The Internet goes on high alert after discovery of 8 compromised TLS certs Intermediate certs allow anyone to mint web credentials for any Internet server.

Ars Technica

The Internet goes on high alert after discovery of 8 compromised TLS certs

Intermediate certs allow anyone to mint web credentials for any Internet server.

Perhaps not entirely obvious: If you want to withstand current AI-driven attacks and ensure that vulnerabilities discovered by AI are patched as quickly as possible, the only effective defense is to use AI.

Podvod má podle Die Zeit poměrně ustálený scénář. Zájemce nejprve na sociálních sítích napíše kritický příspěvek o tureckém prezidentovi Recepu Tayyipu Erdoğanovi. Urážka hlavy státu je přitom v Turecku trestná, takže podplacený státní zástupce využije příspěvek jako důvod k zahájení vyšetřování. Záznam o řízení se následně objeví v oficiální turecké justiční databázi Uyap, kterou provozuje tamní ministerstvo spravedlnosti. Žadatel pak může před německým Spolkovým úřadem pro migraci a uprchlíky (BAMF) na svém mobilním telefonu otevřít příslušný záznam a doložit, že je ve své vlasti trestně stíhán.

Aktuálně.cz - Víte, co se právě děje

„S tímhle získáš azyl kdekoli.“ Turci objevili kuriózní trik, jak se dostat do Německa

Německé úřady řeší sofistikovaný trik tureckých žadatelů o azyl. Ti si za úplatky nechávají ve své vlasti zahajovat skutečná trest...

DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied

404 Media

DHS Said They Searched Man Who Wiped GrapheneOS Phone for Child Abuse Material. They Lied

Officials said they wanted to search the phone of Samuel Tunick, a Stop Cop City activist, for child abuse material. It was actually because he was...