RECTIFIER

Breaking: New X Account Takeover Exploit Reportedly Being Used by Threat Actors, Live Footage Surfaces (thecybersecguru.com)

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication (thehackernews.com)

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers (thehackernews.com)

Video Friday: Meet Microduck (spectrum.ieee.org)

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body (thehackernews.com)

Income By Major (ACS 2024) (economistwritingeveryday.com)

ServiceNow Patches Three CVSS 10.0 Vulnerabilities Allowing Unauthenticated Code Execution and SQL Injection (thecybersecguru.com)

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code (thehackernews.com)

Friday links: not-so average returns (abnormalreturns.com)

Large Folk Art Whirligig with original traces of paint. 30". Found in Michigan c. 1940 - 1950 (dulltooldimbulb.blogspot.com)

2000 Great Songs #1436: Run (www.jitterywhiteguymusic.com)

Honda Engine Warranty (idiotking.org)

Lagos Construction Insanity & Metro Connectivity Solutions (subseacables.blogspot.com)

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth (thehackernews.com)

Weekend Link Dump (strangeco.blogspot.com)

Key Reasons Why Identity Fabric Matters in 2026 (thehackernews.com)

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL (thehackernews.com)

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access (thehackernews.com)

Why Are the Hyperscalers Building So Many Cables With Weird Routing? (subseacables.blogspot.com)

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server (thehackernews.com)

When it Snows it Pours – Anatomy of a ServiceNow Red Team (www.mdsec.co.uk)

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions (thehackernews.com)

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations (thehackernews.com)

When you keep AI Lean, you keep AI correct (stackoverflow.blog)

Some Malicious PE Stats, (Thu, Aug 27th) (isc.sans.edu)

UBS versus Switzerland (thefinanser.com)

Things worth reading: 28th August 2026 (thefinanser.com)

A Note On Subsea Optical Amplifiers (subseacables.blogspot.com)

ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th) (isc.sans.edu)

Linkdump No 122 (82mhz.net)

Hand carved vintage folk art Puppet Head of a woman (dulltooldimbulb.blogspot.com)

cPanel Patches CVE-2026-65643 Root Code Execution Flaw (www.cyberkendra.com)

2degrees and One NZ plan shared network (billbennett.co.nz)

Trying to discover the magic that people feel around LLMs (assertfail.gewalli.se)

Next.js Patches Two Critical RCE Flaws in 15.5.24, 16.3.3 (www.cyberkendra.com)

OpenAI Cyber Defense Letter Signed by 116 Companies (www.cyberkendra.com)

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face (thehackernews.com)

Charulata(1964) (classicfilmandtvcorner.wordpress.com)

UNIX V4 workshop at Low Resource Computing (github.com) (github.com)

Decompiling a Nintendo 64 Game in 84 Days (blog.chrislewis.au) (blog.chrislewis.au)

Thursday links: messing with market fairness (abnormalreturns.com)

Should Immigrant Doctors Have to Retrain? (economistwritingeveryday.com)

Critical Next.js & libheif RCE Vulnerabilities: Inside the August 2026 AVIF Zero-Day Exploit Chain (thecybersecguru.com)

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE (thehackernews.com)

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories (thehackernews.com)

Anatomy Of A Deep Sea Fibre Optic Cable (subseacables.blogspot.com)

The U.S. Is Building CHIPS Act Fabs but Neglecting R&D (spectrum.ieee.org)

Make a Portable Wide-screen Mechanical TV (spectrum.ieee.org)

Welcome to the machine: emulating a CPU (bitfieldconsulting.com) (bitfieldconsulting.com)

Two Alleged TeamPCP Hackers Charged in Australia After Massive Software Supply Chain Attacks (thecybersecguru.com)

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers (thehackernews.com)

Simple Math Made Hard (dispatchesfromturtleisland.blogspot.com)

Longform links: entertaining the reader (abnormalreturns.com)

2000 Great Songs #1435: Teen Angst (www.jitterywhiteguymusic.com)

The Shipping Industry Has a Growing Appetite for Methanol Fuel (spectrum.ieee.org)

Why You Shouldn’t Trust Sandbox Results (systemweakness.com)

Nothing Was Vulnerable……Until These 5 Things Were Connected (systemweakness.com)

EnterPrize — TryHackMe Writeup (systemweakness.com)

What is LiteLLM Attack and why it Should Scare Every SOC Analyst More Than Any CTF (systemweakness.com)

OverTheWire Bandit Walkthrough — Level 32 → 33 | 30-Day Cybersecurity Learning Journey (Day 32) (systemweakness.com)

Attack: BYOVD (systemweakness.com)

CTF Basics: Understanding Secure Shell (SSH) (systemweakness.com)

Python 3.14’s Free-Threading Will Break Your FastAPI App — Here’s How to Prepare (systemweakness.com)

Learn How to Build Security Operations Ready for AI-Powered Attacks (thehackernews.com)

Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks (thehackernews.com)

London/Singapore Redundancy: When the Red Sea Gives You Heart Burn (subseacables.blogspot.com)

13 Things I Found on the Internet Today (Vol. 778) (www.messynessychic.com)

What the Data Says About AI in Security Operations in 2026 (thehackernews.com)

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools (thehackernews.com)

A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th) (isc.sans.edu)

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address (thehackernews.com)

Scientists switch on a strange new form of magnetism in an ultrathin material (www.sciencedaily.com)

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access (thehackernews.com)

Why 90s Arcade Games Felt Completely Different From Home Ports (playstationcouch.com) (playstationcouch.com)

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs (thehackernews.com)

How Dolphin deals with antipiracy of „The Smurf‘s Dance Party“ (youtube.com) (www.youtube.com)

BFId: How Wi-Fi Beamforming Feedback Can Identify People Without Cameras or a Device (thecybersecguru.com)

Invest In Your Human Capital: Classic Textbook on Subsea Cable Technology (subseacables.blogspot.com)

Do we need a digital euro? (thefinanser.com)

Things worth reading: 27th August 2026 (thefinanser.com)

ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th) (isc.sans.edu)

"Flying Toasters!" reverse-engineered 1:1, in the browser (github.io) (backslasher.github.io)

CP/M Neo - A CP/M-inspired operating system (github.com) (github.com)

Gertieboard Is an IBM PC/XT Clone That Blends Vintage and Modern Hardware (hackster.io) (www.hackster.io)

Why Atari failed (homeip.net) (dfarq.homeip.net)

Commodore Jacks Into Night City With the Commodore 77 cyberpunk collaboration (commodore.net) (commodore.net)

1974’s Bizarre Game Consoles (thehistoryofhowweplay.wordpress.com) (thehistoryofhowweplay.wordpress.com)