-
The Tang Dynasty understood the composition of the moon earlier than modern astronauts. (19th May 2026)
Preface: This story, from *Youyang Zazu: Tianzhi* ((酉陽雜俎: 天咫), recounts how a Tang Dynasty scholar, lost in the Songshan Mountains (嵩山), encountered a “moon man 《修月人》” repairing the moon. The character describes the moon as a sphere composed of seven precious materials and suggests that the light and shadow on its surface are caused by…
-
CVE-2026-46300 (Fragnesia) is a Linux kernel privilege escalation in the XFRM ESP-in-TCP subsystem. Does it affect GX-grade supercomputers? (18th May 2026)
Preface: If BlueField DPU supports configuring IPsec rules using strongSwan 5.9.0bf, does it use kernel IPsec in ARM? Yes, when using strongSwan 5.9.0bf on the BlueField DPU, it utilizes the Linux kernel IPsec stack (xfrm) running on the ARM cores to manage and configure security associations, which can then be offloaded to the hardware acceleration…
-
A more imaginative assumption on TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads (15th MAY 2026)
Preface: In these scenarios (see attached diagram), microarchitecture side-channel attacks targeting Intel TDX can directly impact and jeopardize the security of AMD accelerators. Even though the AMD Instinct APU operates on a completely different silicon package, the two architectures are fundamentally tied together by a shared software stack, device driver interface, and physical interconnect fabric.…
-
Checkmarx Jenkins AST Plugin Compromised (14th May 2026)
Preface: Jenkins’ popularity and its rich plugin ecosystem are the main reasons for integrating event monitoring tools with it. While there isn’t a single “API plugin,” Jenkins has a powerful built-in remote access API (supporting XML, JSON, and Python), which many external monitoring tools use to retrieve data. Background: With its unparalleled flexibility, vast plugin…
-
Shai-Hulud operates as a multi-vector, self-propagating worm. It routinely changes its entry points to compromise environments. Stay vigilant! (14th May 2026)
Preface: The TanStack incident was a highly sophisticated software supply-chain compromise that occurred on May 11, 2026. An attacker successfully hijacked TanStack’s legitimate GitHub Actions release pipeline to publish 84 malicious versions across 42 @tanstack/* npm packages, including widely used tools like @tanstack/react-router. Background: Both @tanstack/react-router and @tanstack/react-query are client-side frontend libraries and K8s is…
-
CVE-2026-43284: Dirty Frag tricks the IPsec/TCP stack into doing the “dirty work”(13th May 2026)
Preface: The “Dirty Frag” attack chains two separate flaws in the Linux kernel’s networking stack: one in the ESP(Encapsulating Security Payload) protocol used by IPsec and another in the RxRPC protocol used for the AFS distributed file system. If you do not use IPsec, disabling its modules removes one of the major attack paths. Background:…
-
How can Apple meet requirements for lawful key escrow similar to those in Canada’s C-22 Act? (12th May 2026)
Preface: Can we say that Apple’s iPhone is the most secure smartphone in the world? Yes, the Apple iPhone is widely considered the most secure mainstream smartphone for general users, largely due to its “walled garden” approach. Background: As of May 2026, Canada’s proposed Bill C-22, the Lawful Access Act (2026), is currently being debated…
-
CVE-2026-0300: Best practice guidelines remediate design weakness for PAN-OS software (11th May 2026)
Preface: Nginx in PAN-OS assists in routing traffic to backend management components, such as those responsible for user authentication and Captive Portal functionality. Background: Palo Alto Networks firewalls can intercept HTTP and HTTPS traffic from unauthenticated users and redirect them to an internal web server (the Authentication Portal) to collect credentials and establish a user-to-IP…
-
CVE-2026-25293 – Incorrect authorization in PLC FW (7th May 2026)
Preface: Qualcomm chipsets contain Powerline Communication (PLC) firmware features, particularly within their automotive and IoT-focused product lines designed for smart grid and electric vehicle (EV) charging. Background: To implement write protection for SPI Flash, you generally need a combination of Hardware WP# pins and Software Status Register configurations. The SPI Flash physical and software protection…
-
CVE-2026-25254: Improper authorization in Qualcomm Software Center (6th May 2026)
Preface: Even though QSC is installed on your Windows or Linux PC, its primary mission is to manage the Linux operating system that lives on your Target Development Board. QSC v1.21.0 knows exactly how to handle projects based on “Long Term Support Kernels” and provides the specific tools and patches required for them. Background: To…