We’re cooked
‼️ Ubuntu and Red Hat still have no fix for a Linux kernel flaw that Anthropic says its unreleased AI model turned into a remote root exploit.
The bug, CVE-2026-98432, is a use-after-free in the IPv4 TCP handshake, rated 9.8 out of 10.
The exploit needs no credentials and targets servers with a multipath TCP listener, which Go 1.24 and later open by default.
The fix reached stable kernels on 11 October and Debian has shipped it. Ubuntu still marks every release from 16.04 to 26.10 vulnerable.
Red Hat now rates it Critical but has no patched kernel for RHEL 8, 9 or 10.
Anthropic has not released the exploit. By its count, it takes 48 minutes to leak a kernel pointer and five more to run commands as root.
28
We’re fucked
I’ve heard several OAI people say there are unfixable bugs in hardware that are exploitable by AI models directly speaking machine code so even if we could solve software that’s not enough. We need defense to move faster than offense if that’s even possible we may just have a new normal that requires adapting to insecure software (bank transfers require going into a branch and taking a dna test 🤣😬)
33
The hackpocalypse is here
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
39
Everything will be leaked / hacked
BREAKING: Japan declares a "state of emergency in cyberspace" as cyberattacks surge, with more than 20 major companies reporting breaches.
Readers added context they thought people might want to know
Japan did not formally declare a state of emergency in cyberspace. The phrase originated from a ruling party official at an LDP meeting; government agencies issued cybersecurity warnings and basic security advisories to companies amid breaches at 20+ firms.
japancyberwatch.com/articles/japan…
japancyberwatch.com/articles/japan…
cyber.go.jp/pdf/press/taio…
thenextweb.com/news/japan-cyb…
46
At least they don’t die of “suicide”
Several Finnish members of the Parliament have had recent break-ins where their houses "have been rearranged" a bit.
This is a very classic KGB/FSB/SVR move that has been in use at least since the early cold war. It has been targeted at journalists, politicians and diplomats.
1
44
This is the new reality
I am done with this shit. It is over. The state of engineering right now is horrible. It has been half a month since I started a new role at a big company. Nobody knows anything here. The specs, code, tests, PRDs, tickets, resolution of those tickets, reports, etc., everything is made by Claude Code. Nobody on my team likes this. They are being forced to ship as much as they can. I have heard multiple times from higher management that pushing code is not a bottleneck, so why are we slow? People are working 12 to 13 hours a day just to press enter. Nobody is reading anything. Humans in corporate are doing nothing on their own. Everyone, literally everyone, from an L1 to an L7 engineer here is doing the same thing. Talk to Claude. There is no sense of victory. Nobody is resolving bugs. In reality, nobody is thinking anymore. Everything is done by LLMs. It is so soul-sucking. I would not mind it, to be honest, if we were at least given the time to check out the code and see what is going where. But no, the goal is to just ship. No matter what happens.
1
77
