News

The x321 Tech Digest — what engineers are talking about, distilled daily.

  • Vulnerability Watch No73

    vLLM Loader Flaw Enables Remote Code Execution • AVideo Scheduler Bug Exposes Email Jobs • MemberPress Flaw Allows Administrator Account Takeover • YayPricing Plugin Enables Stored Script Attacks • Zonify Plugin Leaks Authentication Tokens…

    Read digest →

  • Vulnerability Watch No72

    GitLab Duo Chat Flaw Exposes Sensitive Search Credentials • GitLab Repository API Bug Allows Unauthenticated File Reads • stb_vorbis Heap Overflow Can Corrupt Memory • OpenStack Keystone Delegated Tokens Expose Credentials • Default Admin Password Leaves Inventory Component Exposed…

    Read digest →

  • Topics Everyone Is Talking About No422

    DiffOS: A Linux Distribution Built for Freedom • When AI Benchmarks Clash with the Nature of Mathematics • 220 in Google Ads Revealed a Bot-Driven Install Problem • AI Agents Probe RubyGems Vulnerability in a New Security Challenge • Measuring Code Quality Beyond AI-Generated Correctness…

    Read digest →

  • Vulnerability Watch No71

    SPIP Flaw Enables Remote Code Execution at Critical Severity • SPIP Authorization Bypass Allows Administrator Account Takeover • SPIP Sitemap SQL Injection Exposes Database Secrets • Laci Synchroni OAuth Bug Enables User Impersonation • MoguBlog Authorization Flaw Allows Comment Deletion…

    Read digest →

  • Topics Everyone Is Talking About No421

    Shopify Returns to Native Mobile Development After React Native Journey • Rust Becomes a Tier-1 Language at Microsoft • Save Your Cable Box: A Tribute to Forgotten Tech Gear • Streaming Subscriptions Now Cost 702 More Per Year Than in 2021 • Phishing Is Not the Users Fault Nor a DNS Problem…

    Read digest →

  • Vulnerability Watch No70

    WooCommerce Plugin Flaw Exposes Arbitrary Files • WordPress Plugin Bug Enables Account Takeover • Editor Upload Vulnerability May Enable Code Execution • Velociraptor Backup Flaw Allows Elevated Query Execution • Critical Permission Bypass Impacts Endpoint Control…

    Read digest →

  • Tech Layoffs Watch No20

    Ruiz Foods Reduces Workforce Amid Weak Demand • Kellanova Restructures With 112 Job Cuts

    Read digest →

  • Topics Everyone Is Talking About No420

    A Decade of rustls: Building Secure Rust Infrastructure • iPhone 18 Pro and iPhone 18 Pro Max • Exploring the Economic Future of Transformative AI • Flocks Vision of an Always-Surveilled World • Automattic Board Places CEO Matt Mullenweg on Leave…

    Read digest →

  • Framework Release Watch No19

    React 19.3.0 adds view transitions and fragment refs

    Read digest →

  • Vulnerability Watch No69

    VLC Image Decoder Flaw Causes Buffer Overflow Risk • CommonMark Parser Bug Enables Denial of Service • PocketMine-MP Login Processing Bug Crashes Servers • PocketMine-MP JSON Parser Issue Causes Remote Crashes • PocketMine-MP Null Handling Flaw Disrupts Servers…

    Read digest →