3+ day, 20+ hour ago   (487+ words) Tencent has since deployed patches and server-side mitigations that block the specific exploit for all users. No exploitation in the wild has been reported. The attack's simplicity is what makes it alarming. An attacker needed only a WeChat account on…...

3+ day, 20+ hour ago   (483+ words) DeepSeek V4 Pro, which launched in April 2026 as an open-weight model with 1.6 trillion total parameters and roughly 49 billion active per inference pass, was itself considered unusually compute-efficient for the quality it delivered. Magic's claimed compute for matching it — approximately 1.58 × 10²³ FLOPs — is…...

3+ day, 19+ hour ago   (524+ words) The result is a global KV cache of 890 bytes per token — roughly one-quarter of V4-Flash and approximately 1/437th of DeepSeek-V1's per-token global KV cache size from just two years ago. The memory savings come from four distinct architectural changes working…...

4+ day, 18+ hour ago   (600+ words) EIP-8141 breaks that bundle apart by decomposing a transaction into discrete frames, each of which is its own contract call. The technical transaction type is designated 0x06 in Ethereum's type registry, and a transaction payload now carries a list of frames…...

4+ day, 13+ hour ago   (605+ words) The Exchange Server situation warrants front-of-queue treatment over the two named zero-days. CVE-2026-55007 allows a remote, unauthenticated attacker to execute code on an affected Exchange server by sending an email containing a malicious Visio attachment. The code runs when the…...

4+ day, 19+ hour ago   (165+ words) The trajectory — 66 vs. 61, then 57 vs. 55, then 53 vs. 53 — is not evidence that the models converged. No new models were released. The benchmarks changed. Identical composite scores mask two findings that matter more for deployment than the headline number does. The practical…...

5+ day, 17+ hour ago   (619+ words) The incident is the largest publicly disclosed Bitcoin sidechain security breach on record: approximately 3,996 BTC, worth roughly $316 million, drained from the Liquid Federation's reserve wallet in a single transaction, recovered in part within about 26 hours through an entirely on-chain negotiation....

5+ day, 17+ hour ago   (572+ words) StyleSmuggler is a two-stage server-side template injection attack (CWE-1336) that exploits Magento's template rendering engine through a specific input property called styles. Server-side template injection is a class of vulnerability in which user-supplied input triggers remote code execution — a distinction…...

6+ day, 5+ hour ago   (394+ words) This is not a design flaw in HAProxy. The filter API is working as intended. The exploitation is the binary replacement itself: an attacker who can install a recompiled version of a trusted application inherits all of that application's privileges…...

1+ week, 1+ day ago   (298+ words) The agents were running multi-round timed web-lookup tasks — information-retrieval exercises structured as five sequential questions, with a generous first window and extremely short answer deadlines (sometimes 13 seconds) for the rounds that followed. Their environment gave them read access to the…...