. . . t h e d e a d . d o g . . .                        
                                                                                 
         .-----------..__  .-----------------------.  __..---------._ .-.        
        | .---------.    \/                         \/          .+*+. . |        
        | :   A      `--.._             .                    _..--'   : |        
        | :   .                        /:\                            : |        
        | :  /:\                     ./:::\.                          : |        
        | : (_:_)                  .:/::|::\:.                        : /        
        \ :  _|_                 .::/:::|:::\::.                      .<         
         > .                   .:::/::::|::::\:::.                    : \        
        / :                  .:::/::::--+--::::\:::.                  : |        
        | :               .:::::/:::::::|:::::::\:::::.               : |        
        | :            .::::::/\:::::::.:.:::::::/\::::::.            : |        
        | :          .:::::::/  \[0xDEAD:0xBEEF]/  \:::::::.          : |        
        | :        .::::::::/ /\ \::::..:..::::/ /\ \::::::::.        : |        
        | :       .::::::::/ /  \ \:::: : ::::/ /  \ \::::::::.       : |        
        | :      (::::::::/_ tDd _\:::'.:.`:::/_ PWN _\::::::::)      : |        
        | :     (:::::::::| ``::::''   .:.   ``::::'' |:::::::::)     : |        
        | :     (:::::::::| .:::::::..     ..:::::::. |:::::::::)     : |        
        | :     (:::::::::|:::::' [ x ]   [ x ] `:::::|:::::::::)     : |        
        | :     (:::::::::\:::::. `---'   `---' .:::::/:::::::::)     : |        
        \ :     (::::::::::\ `:::.    .:::.    .:::' /::::::::::)     : |        
         > .     \:::::::::::\__ ::. / /|\ \ .:: __/:::::::::::/      : |        
        / :       \::::::::::::| :::. \_|_/ .::: |::::::::::::/       : /        
        | :        \:::::::::::| ::::_|||||_:::: |:::::::::::/        .<         
        | :         \::::::::::/\ .:/\_/|\_/\:. /\::::::::::/         : \        
        | :           `::::::::' ``::.| | |.::'' `::::::::'           : |        
        | :              `-----' 8===8`:::'8===8 `-----'              : |        
        | :                       _\_/:::::\_/_                       : |        
        | :                      /___/:::::\___\                 `|'  : |        
        | :                     `==============='               (`:') : |        
        | :                                                      \:/  : |        
        | : .+*+.        . . :: [ t D d : A C E ] :: . .          '   : |        
        | :.. :                                                   A ..: |        
        | `---.._ `--..___..--~`\.-------------------./'~--..___..--' . |        
         `-------`~--..___       `'                 `'     ___..--~--'  '        
                                                                                 
     _______________________/  - x  live: off  x -  \_______________________     
                           /`-----------------------'\                           
      /\___/\             (: `_____________________' :)             /\___/\      
     / .:::. \           /   [ tDd // THE DEAD DOG ]   \           / .:::. \     
    /[ x   x ]\         /  .::     MMXXVI A.D.     ::.  \         /[ x   x ]\    
     \ \V_V/ /         /    LATRANDO, VULNERA INVENIO    \         \ \V_V/ /     
      `-(U)-'         (_=================================_)         `-(U)-'
tdd@wire:~$""/var/archive/digests^C
 .-.                                              .-. 
(: `----------------------------------------------' :)
 )   back-issue archive // briefs & bone articles   ( 
(: .----------------------------------------------. :)
 `-'                                              `-'

Permanent back-issue archive of tDd executive briefs, RF dispatches & 7D/30D Bone Articles (briefs.xml RSS):

IssueChannelHeadlineSourcesPublished
#58HUB 30Dphp2shell burns the PHP core while Barracuda pre-auth root and WordPress upgrade-window RCE keep the wire hot8192026-11-15 08:18 UTC
#57HUB 7DApache HTTP/2 heap corruption RCE and a bypassed N-able zero-day headline a week where abandoned parsers still leak memory.3252026-11-15 08:14 UTC
#56HUB 24HAbandoned DTS decoder keeps walking off the heap while Cursor's extension pipeline gets hijacked upstream.372026-11-15 07:24 UTC
#55RF 24HKrakenSDR drops Python for C++ DoA while PortaPack kills SD corruption and Turk Telecom proves GNSS holdover is a myth442026-11-15 07:24 UTC
#54NEWS BONE 30DPre-Auth Races, Poisoned Caches, and 31-Bit Secrets: The Month the Floor Fell Out From Under the Stack2052026-11-15 07:23 UTC
#53NEWS BONE 7DPoisoned Auth Caches, 31-Bit Secrets, and the Week the Patch Window Collapsed1032026-11-15 07:22 UTC
#52HUB 24HStolen Fireworks creds poisoned Cursor's extension pipeline while libdca bitstream walks off the heap702026-11-15 07:16 UTC
#51RF 24HKrakenSDR drops Python for C++ DoA, PortaPack fixes SD corruption, GNSS holdover fails hard432026-11-15 07:16 UTC
#50X BONE 30DInternet2Shell: The Month the Web's Floor Fell Out4212026-11-15 05:12 UTC
#49HUB 30Dphp2shell burns the PHP core while Barracuda pre-auth root and WordPress upgrade-window RCE keep the wire hot8192026-11-15 05:11 UTC
#48RF 30DCoherent C++ DF rigs, ESP32 5 GHz sniffers, and GNSS holdover rot dominate the wire.4592026-11-15 05:08 UTC
#47X BONE 7DBackdoored Builds, Cloud Identity Confusion, and the Silent Swallow of Your Recon Tooling922026-11-15 05:08 UTC
#46HUB 7DApache HTTP/2 heap corruption RCE and a bypassed N-able zero-day headline a week where abandoned parsers still leak memory.3252026-11-15 05:07 UTC
#45RF 7DGNSS holdover dies ugly, KrakenSDR goes full C++, and uwifi frees monitor mode from the kernel1432026-11-15 05:04 UTC
#44HUB 24HUnmaintained libdca keeps walking off the heap while Cursor's extension pipeline gets hijacked upstream.742026-11-15 05:04 UTC
#43RF 24HKrakenSDR drops Python for C++ DoA, PortaPack fixes SD corruption, GNSS holdover fails hard422026-11-15 05:03 UTC
#42X BONE 30Dphp2shell Fallout, Cache-Control CSP Knifework, and a Month of Supply-Chain Backdoors4212026-11-15 04:31 UTC
#41X BONE 7DCodex Backdoored, Fingerprint Walls, and Programs That Now Demand You Pivot942026-11-15 04:31 UTC
#40HUB 24HAbandoned DTS decoder still walks off the heap while Cursor's marketplace pipeline gets hijacked through stolen vendor creds.762026-11-15 03:16 UTC
#39RF 24HPortaPack kills SD corruption, KrakenSDR drops Python, GNSS holdover fails hard at Turk Telekom442026-11-15 03:16 UTC
#38HUB 30DAbandoned DTS decoder walks off the heap while Apache races toward RCE and a researcher dumps unreported macOS bugs.3302026-11-15 03:13 UTC
#37RF 30DKrakenSDR goes full C++, PlutoSDR gets a CRPA anti-jam rig, and 6 GHz wardriving lands on the ESP32-C5.2452026-11-15 03:10 UTC
#36HUB 7DAbandoned DTS decoder, a hot mod_http2 race, and a raw macOS bug dump make this week's wire worth losing sleep over.2682026-11-15 03:10 UTC
#35RF 7DKrakenSDR goes full C++, PlutoSDR gets a CRPA anti-jam rig, and Mayhem firms up its clocks.1552026-11-15 03:06 UTC
#34HUB 30DAbandoned decoders, unauth Mongo frees, and editor supply chains -- the quiet bugs bite hardest this month.2642026-11-15 02:02 UTC
#33RF 30DKrakenSDR goes full C++, Pluto CRPA anti-jam lands, and GNSS spoofing makes drones think they're in Peru1402026-11-15 01:56 UTC
#32HUB 7DAbandoned DTS decoder, unauth MongoDB UAF, and a mod_http2 race headline a patch-heavy wire.2422026-11-15 01:55 UTC
#31RF 7DCoherent C++ DF rigs, Pluto CRPA anti-jam, and GNSS spoofing math hit the wire this week.832026-11-15 01:47 UTC
#30HUB 24HAbandoned DTS decoder walks off the heap while Cursor's extension pipeline hands attackers a signed front door.752026-11-15 01:47 UTC
#29RF 24HKrakenSDR drops Python for C++ MUSIC DoA while PortaPack syncs PRALINE to TCXO342026-11-15 01:47 UTC
#28HUB 30DBarracuda pre-auth root, a mod_http2 race, and CSP allowlists bleeding credentials -- patch windows keep shrinking.2552026-11-14 23:11 UTC
#27RF 30DCRPA anti-jam on a Pluto, KrakenSDR goes C++, and Mayhem syncs its TCXO -- a busy bench month.1362026-11-14 23:08 UTC
#26HUB 7DCursor's marketplace breach proves extension pipelines are the new package registries -- diff your editor before it diffs you.1562026-11-14 23:07 UTC
#25RF 7DKrakenSDR goes full C++, Pluto CRPA anti-jam lands, and 6 GHz wardriving hits mainline802026-11-14 23:03 UTC
#24HUB 24HStolen Fireworks tokens poison Cursor's extension pipeline while GPAC and Dancer hand out fresh memory and session primitives.672026-11-14 23:03 UTC
#23RF 24HKrakenSDR drops Python for C++ MUSIC DoA while PortaPack syncs PRALINE to TCXO302026-11-14 23:03 UTC
#22HUB 30DPre-auth root RCEs and race-condition RCE stack up while sandbox maintainers patch leaks in silence3132026-11-14 22:18 UTC
#21HUB 7Dmod_http2 race, MongoDB unauth UAF, and a git unborn-HEAD escape dominate a patch-storm week.2302026-11-14 22:17 UTC
#20HUB 24HStolen AI-infra creds poison an editor marketplace while GPAC and Dancer hand out memory and session bugs for free.1062026-11-14 22:17 UTC
#19HUB 24Hxssdoctor drops a dozen inert bun supply-chain probes while Google quietly hardens gVisor and osv.dev452026-11-14 21:00 UTC
#18HUB 24Hxssdoctor drops a dozen inert Muse harnesses probing package lifecycle, submodule and nested-config execution452026-11-14 17:00 UTC
#17HUB 30DSilent gVisor confinement patches and a git symref escape PoC headline a repo-heavy wire742026-11-14 16:51 UTC
#16HUB 7DgVisor bolts itself into a device cgroup while git symref escapes and CSP allowlists leak credentials532026-11-14 16:51 UTC
#15HUB 24HMuse lifecycle probes and quiet gVisor device-cgroup confinement dominate a dead-news wire452026-11-14 16:50 UTC
#14HUB 30DWordPress core upgrade-window RCE under active probing -- CVE-2026-119977 is an unauthenticated race condition in the core update process, hitting 4.7742026-11-14 16:17 UTC
#13HUB 7DgVisor device-cgroup confinement + filestore cleanup -- Google's user-space kernel quietly bolted the sandbox into a device cgroup and patched a missi532026-11-14 16:16 UTC
#12HUB 24HgVisor device-cgroup confinement + filestore cleanup -- Google's sandbox kernel quietly bolted the sandbox into a device cgroup and patched a missing452026-11-14 16:16 UTC
#11HUB 30DWordPress core upgrade-window RCE is live-fire -- CVE-2026-119977 is an unauthenticated race condition in the core update process, hitting 4.7 through742026-11-14 16:05 UTC
#10HUB 7DApache HTTP/2 CVE-2026-119618 is a straight remote-code-execution hole -- memory handling in the h2 stack gives an unauthenticated peer a path to code532026-11-14 16:04 UTC
#9HUB 24HgVisor quietly bolts the sandbox into a device cgroup and plugs a filestore leak -- two pushes in the same stretch: cgroup fixes plus missing filestor452026-11-14 16:01 UTC
#8HUB 24HDead air on the news and tweet side -- nothing recorded in this window -- so every bit of signal I care about today is sitting in repo telemetry.452026-11-14 15:26 UTC
#7HUB 24HNo news, blog, podcast, or tweet items landed in this 24h window -- the entire signal is GitHub-native, so treat this as a repo-diff threat briefing r342026-11-14 12:59 UTC
#6HUB 30DWordPress 7.1.4 (Oct 28, 2026) patched 22 flaws including an unauthenticated race-condition RCE in the core upgrade path, and Wordfence is already see752026-11-14 08:59 UTC
#5HUB 7D[James Kettle / @albinowax] "Blind trust: stealing credentials through CSP" -- the big idea of the week: CSP allowlists that include a host serving us372026-11-14 08:58 UTC
#4HUB 24HNo fresh news, blog, podcast, or tweet items landed in this window; all actionable signal is GitHub-side, led by [@xssdoctor] publishing a PoC harness172026-11-14 08:58 UTC
#3HUB 30D[Wordfence] WordPress 7.1.4 patches 22 flaws, including an unauthenticated upgrade-window race-condition RCE; exploitation attempts were detected afte752026-11-14 08:56 UTC
#2HUB 7D[Ram Gall / Wordfence] 497 vulnerabilities disclosed across 312 WordPress plugins and 1 theme in a single week -- the plugin ecosystem remains a fireh372026-11-14 08:55 UTC
#1HUB 24HNo news, blog, podcast, or tweet items landed in this 24h window -- signal is 100% GitHub telemetry, so treat the below as code-level, not narrative-l172026-11-14 08:54 UTC