Red hat للحين ما صلحوا ZDI-CAN-33367 بينما اغلب توزيعات لينكس صلحتها
شركة منتجاتها في ملايين الاجهزة هذي مصيبة
‼️ Ubuntu and Red Hat still have no fix for a Linux kernel flaw that Anthropic says its unreleased AI model turned into a remote root exploit.
The bug, CVE-2026-98432, is a use-after-free in the IPv4 TCP handshake, rated 9.8 out of 10.
The exploit needs no credentials and targets servers with a multipath TCP listener, which Go 1.24 and later open by default.
The fix reached stable kernels on 11 October and Debian has shipped it. Ubuntu still marks every release from 16.04 to 26.10 vulnerable.
Red Hat now rates it Critical but has no patched kernel for RHEL 8, 9 or 10.
Anthropic has not released the exploit. By its count, it takes 48 minutes to leak a kernel pointer and five more to run commands as root.
67
yyyy retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: : Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?
مع الذكاء الاصطناعي راح تعتادون على هذي الاحداث بشكل يومي، حاول تقلل سطح الثقة وتوقع ان كل طبقة حماية عندك راح تفشل ف كثر الطبقات وحدثها اول باول
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
62
yyyy retweeted
This is an MBS appreciation post.
I don’t think he gets anywhere near enough credit for what he’s doing for the Muslim world.
In Sudan, he’s fighting against the genocidal RSF militia.
In Yemen, he’s backing the Yemeni government against the khat munching rogue Houthi militia.
In Syria, he’s investing billions into its reconstruction and is the main backer of the vision to turn the country into a major trade and connectivity hub.
In Lebanon, he’s the main backer of the Lebanese government, both economically and diplomatically.
In Palestine, he’s helped secure Trump’s backing for the Gaza peace plan and is set to invest billions in Gaza’s reconstruction and the establishment of a Palestinian state.
He successfully lobbied France, Britain, Portugal, Luxembourg, Malta, Andorra, Monaco and San Marino to recognise Palestinian statehood, with Belgium also committing to recognition.
In Pakistan, he’s repeatedly stepped in with billions in financial assistance to help prevent an economic collapse.
In Somalia, he’s supporting Somalia’s unity and working to block any recognition of breakaway regions like Somaliland.
And in Saudi Arabia, he’s grown the sovereign wealth fund from $150 billion to 1 trillion and doubled the country’s GDP since taking power.
All of this while confronting Iranian and Israeli expansionism across the region, and while being called a traitor and a sellout.
If you’ve been conditioned to hate this man, ask yourself how much of that hatred comes from what you actually know and how much comes from what you’ve been fed.
Because whatever you think of him, you should be hoping and praying that he succeeds in what he’s trying to achieve. If his vision succeeds, the entire Muslim world stands to benefit.
yyyy retweeted
في هذا الوقت من يلتزم الصمت في الدفاع عن الوطن مثل من فر يوم الزحف ، والله ان الحرف في وقتنا اقوى من الرصاص
الحرب عسكرية و اعلامية ، الدوله شايله عنك وحده و شل انت الثانيه
yyyy retweeted
سمو ولي العهد في الخطاب الملكي
تحت قبة مجلس الشورى :
دولتنا المباركة قائمة في كل مراحلها على كتاب الله وسنة رسوله صلى الله عليه وسلم ، متمسكة بالتوحيد والعدل وهو نهج لن نحيد عنه
Real-world results are in. There is a new #1 on Code Arena - GPT-6 Astra (Max)!
It also reshapes the Pareto frontier as the best-performing model at $40/Mtoken, which matches the latest Claude model pricing.
GPT-6 Astra by @OpenAI takes the top spot in Code Arena: WebDev with a score of 1797 pts. This opens up a solid +35pt lead over #2 Claude Fable 5.1 (Max) at 1762 pts and #3 Claude Opus 5 (Max) at 1688 pts.
This is a significant improvement from GPT-5.6 Sol (xHigh) at +180 pts, ranked at #13.
Category level votes still incoming, but already we see it at #1 in: Data & Analytics, Consumer Product, Content Creation Tools and #2 in Gaming and Simulations.
Stay tuned for other categories like Brand & Marketing, Reference-Based Design and Full Stack rankings.
Congrats to the @OpenAI team on this release!
286
yyyy retweeted
We promised open weights for Qwen3.8. Now, time to meet them! 🎉
⚡ Qwen3.8-27B:
- A native multimodal dense model. With just 27B parameters, it outperforms Qwen3.7-Plus overall and shines in real-world coding & office workflows.
- 262K native context, easily extendable to 1M tokens via YaRN.
- Built for builders. Highly efficient, high-quality, and licensed under Apache 2.0.
🚀 The open weights for Qwen3.8-2.4T-A95B (Max-level) have also been released recently.
Whether you're shipping lightweight applications with Qwen3.8-27B locally or building agents with Qwen3.8-2.4T-A95B, they're yours now!
Download, deploy, and build something we haven't imagined yet. 👀👇
- Hugging Face：
huggingface.co/collections/Q…
- ModelScope：
modelscope.cn/collections/Qw…
yyyy retweeted
Today we are introducing Escha-W2 quantization.
A 2-bit Qwen3.6-35B-A3B model built for fast, local inference. The complete model is 12.3GB on disk—small, enough to run on a single consumer GPU — while averaging ~100% of FP8 performance across 12 benchmarks, including:
MMLU-Pro: 80.9
MATH-500: 93.8
GPQA-Diamond: 77.8
LiveCodeBench v6: 62.6
BFCL tool use: 88.9
RULER 8K–128K: 89.9
Commonsense-6: 76.1
On a single RTX 4090, the model runs:
225 tok/s single-stream generation
on 12.3GB on-disk model size
Compressing a 35B MoE model this far without collapsing its capabilities required more than a standard quantization pass.
We built an end-to-end compression system combining state-of-the-art low-bit quantization with model-aware fine tuning and recovery to preserve capabilities most vulnerable to low-bit error.
Quantizing the Qwen 3.6 35B model - from the base model to the final deployable checkpoint — took approximately 10 hours to complete.
Escha-W2 runs through a custom Qwen3-MoE runtime, which includes the weight loader, low-bit decoding kernels and serving integration required to execute the Escha format efficiently. The runtime currently supports SGLang and ZML deployment. vLLM and llama.cpp will be supported in the next release.
No retraining from scratch. No specialized accelerator. One consumer GPU.
Model download: huggingface.co/EschaLabs/Qwe…
Runtime download: huggingface.co/EschaLabs/esc…
Apache-2.0 model and runtime.
استخدام ويندوز في 2026 يعني 100% بيتم اختراقك
ثغرة حرجة جداً في ويندوز تستوجب التحديث فوراً! 🚨💻
أطلقت مايكروسوفت تحديثاً أمنياً لمعالجة ثغرة خطيرة في نظام ويندوز تسمح بتنفيذ أكواد برمجية عن بُعد (RCE)، وإليك التفاصيل:
• التعريف والخطورة: تُعرف بـ CVE-2026-41096 وحصلت على تقييم خطورة 9.8 من 10.
• آلية الهجوم: المهاجم لا يحتاج لتفويض؛ كل ما يتطلبه الأمر هو إرسال رد DNS خبيث لجهازك عبر خادم ملغم أو شبكة WiFi عامة مخترقة.
• مكمن الخطر: الخلل موجود في ملف dnsapi.dll الذي يعالج طلبات DNS في كافة أنظمة ويندوز، مما يضع المتصفحات وتطبيقات الشركات في دائرة الاستهداف.
• ماذا تفعل الآن؟
1.ثبّت تحديثات مايكروسوفت التراكمية لـ مايو 2026 فوراً على كافة الأجهزة والسيرفرات.
2.قيّد حركة مرور DNS للموزعات (Resolvers) الموثوقة فقط.
3.راقب أي عمليات غير طبيعية لملفات Dnscache و svchost.exe.
ثغرة بهذا الحجم غالباً ما يتم هندستها عكسياً واستغلالها بسرعة بعد الكشف عنها، فلا تؤجل التحديث!
580
yyyy retweeted
{إِنَّ اللَّهَ وَمَلَائِكَتَهُ يُصَلُّونَ عَلَى النَّبِيِّ يَا أَيُّهَا الَّذِينَ آَمَنُوا صَلُّوا عَلَيْهِ وَسَلِّمُوا تَسْلِيمًا}
yyyy retweeted
نحمد الله سبحانه وتعالى أن أكرمنا بإتمام صيام شهر رمضان المبارك وقيامه، ونسأل الله أن يديم علينا أمننا واستقرارنا، وأن يحفظ أبطالنا البواسل على الثغور والحدود في مختلف القطاعات العسكرية والمدنية.
وكل عام وأنتم بخير، وبلادنا في عز ورفعة.
yyyy retweeted
Meet a game-changing TTS model that speaks Saudi Arabic like a local. This isn't just another text-to-speech tool. It's a voice cloning powerhouse built specifically for the rich Saudi dialect. Perfect for anyone wanting authentic Arabic voiceovers.
yyyy retweeted
نسبة العنصرية 97%
مستقبل الهوية السعودية والدينية في أمان
