so criiiinge
CVE-2026-24061: Telnetd RCE as Root
https://www.safebreach.com/blog/safebreach-labs-root-cause-analysis-and-poc-exploit-for-cve-2026-24061/

https://threadreaderapp.com/thread/2022387879390122049.html
in case you think computers are deterministic

https://fixupx.com/vsbuffalo/status/2022884433469272316?s=46 😂

and a bit on the broader changes around making software
https://registerspill.thorstenball.com/p/joy-and-curiosity-74

i wish all papers were written as legible as this one

A Comparative Security Analysis of Three Cloud-based Password Managers
https://eprint.iacr.org/2026/058.pdf

life is stranger than fiction and funnier than comedy (see "title")
https://x.com/summeryue0/status/2025774069124399363

Claude's Cycles
ok so it's not just Terence Tao, Donald Knuth is doing vibe research as well

https://www-cs-faculty.stanford.edu/~knuth/papers/claude-cycles.pdf

far from easily accessible but very impressive still
https://www.ctvnews.ca/vancouver/article/bc-man-cured-of-rare-disease-in-world-first-for-new-gene-editing-technology/

hypervisor escape exploits are rare and interesting (tweet is just a teaser but we'll see)
https://x.com/osec_io/status/2029643325125390550?s=46

The Matrix v0.1 ALPHA
(full fruit fly brain simulation plus simplified embodiment by Eon Systems)

Scale it 1000000 times larger to fit the human brain and optimists get immortality, pessimists get digital prison.
https://open.substack.com/pub/theinnermostloop/p/the-first-multi-behavior-brain-upload

psychedelics & outdoors potentiate each other's effects & make them longer lasting -- for treatment-resistant depression, in this case
https://pmc.ncbi.nlm.nih.gov/articles/PMC12967759/

there's no magic in the world other than one that you can bring
https://fixupx.com/IterIntellectus/status/2032858964858228817?s=20

⚠️ PSA: LiteLLM 1.82.7, 1.82.8 on PyPI has been hacked and contains code that extracts credentials etc from the machine where it runs then self-replicates

IoCs:
File: litellm_init.pth (34,628 bytes) in site-packages/
File: ~/.config/sysmon/sysmon.py
File: ~/.config/systemd/user/sysmon.service
Domain: models.litellm[.]cloud
K8s: node-setup-* pods in kube-system

always pin your dependency versions.

cyberpunk is upon us!

tldr: models are becoming better and better hackers, whether you want it or not, and until we find and patch most not-yet-discovered vulns it's gonna be fun times
https://www.youtube.com/watch?v=1sd26pWhfmg

see also: ctf-agent takes 1st place on BSides SF 2026 CTF
https://github.com/verialabs/ctf-agent

PSA: npm axios package has been hacked, unlike LiteLLM if you do frontend you probably DO use it;
npm pins package version by default but at least def dont npm i axios rn.

bun has minimumReleaseAge; also i've arrived at radical golang-style dependency vendoring via npm pack if I don't foresee them updated often
https://x.com/feross/status/2038807290422370479?s=46

noninvasive deep brain stimulation! aka computer -> brain side of the interface!
https://www.nature.com/articles/s41467-026-70346-x

i think this can be upgraded all the way to the infinite-context models
https://microsoft.github.io/memento/blogpost/

psa: Vercel just had a major security incident; better to consider sensitive env vars in deployments leaked
https://vercel.com/kb/bulletin/vercel-april-2026-security-incident

TLDR: No need to beg for the Mythos access, you can find zero-day vulnerabilities with today's open models just fine too.
https://arxiv.org/abs/2604.20801
https://github.com/berabuddies/agentflow

⚠️ PSA: BitWarden CLI compromised in ongoing supply chain attack campaign
https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html