#uuidv7

2 articles · All tags

📰 Digests

October 25, 2026

A Brotli Out-of-Bounds Write Patched in February Without Security Tagging Spreads from Node.js to Python, C++, and Envoy, Turning "HTTP Compression On by Default" into an Industry-Wide Patch Window; Meanwhile National Bodies Vote Down C++26, and Roku Migrates Repos to GitLab with a Warning That Search Indexes Expire Silently — Today's Breakages Stem from Overlooked Defaults

BrotliCVE-2026-111497node2shellhttp2shell

October 24, 2026

Kimi Codifies "Can Do, But Choose Not to Release" in K3.1 Pro Release Notes, Capping Open Weights' Offensive Cyber Capabilities Below In-House Frontier; Meanwhile macOS gcc Binary Unmasked as Clang in Disguise, and Local Wikipedia Turns Out to Be a Thin Wrapper Around Nearby

Kimi K3.1 ProMoonshotopen weightscyber capability self-restriction