https://wireshaman.com/ Cybersecurity and technology intelligence: what's actually breaking, how it works, and what to do about it. en-us Tue, 13 Oct 2026 14:21:55 +0000 https://wireshaman.com/articles/ram-crisis-ddr4-price-surge-2026.html https://wireshaman.com/articles/ram-crisis-ddr4-price-surge-2026.html The WireShaman Editors Hardware Tue, 13 Oct 2026 14:21:55 +0000 Memory is getting pricier than ever. DDR4 is up roughly 24% in a single quarter, and Intel's CEO says consumers face one to three more years of the AI-driven shortage. https://wireshaman.com/articles/mistral-large-4-le-chonk-2026.html https://wireshaman.com/articles/mistral-large-4-le-chonk-2026.html WireShaman Newsroom AI & Tech Tue, 06 Oct 2026 14:00:00 +0000 Mistral unveiled Mistral Large 4, a natively multimodal 1T-parameter MoE model with 52B active parameters, now in public preview on Mistral Studio with open weights due at the end of the month. https://wireshaman.com/articles/gitlab-1942-critical-remote-code-execution-2026.html https://wireshaman.com/articles/gitlab-1942-critical-remote-code-execution-2026.html WireShaman Newsroom Cybersecurity Mon, 12 Oct 2026 12:57:02 +0000 GitLab shipped a critical patch set on 12 October 2026 that closes an unauthenticated remote-code-execution bug in the CI/CD regular-expression compiler alongside 23 other issues. https://wireshaman.com/articles/gpt-6-intelligent-ui-2026.html https://wireshaman.com/articles/gpt-6-intelligent-ui-2026.html The WireShaman Desk AI & Tech Wed, 07 Oct 2026 09:00:00 +0000 OpenAI began rolling out GPT-6 in ChatGPT on October 7, 2026, paired with a new capability called Intelligent UI that lets the model answer questions with charts, calculators, forms and interactive tools built on the spot. https://wireshaman.com/articles/windows-11-24h2-end-of-updates-2026.html https://wireshaman.com/articles/windows-11-24h2-end-of-updates-2026.html WireShaman editorial team Cybersecurity Tue, 13 Oct 2026 21:05:00 +0000 Microsoft's October 2026 security release is the final update for Windows 11 24H2 (Home and Pro) and Windows 10 Enterprise LTSB 2016. The last patch also flips the Active Directory Federation Services Distributed Key Manager container ACL hardening into Enforcement mode. https://wireshaman.com/articles/surface-laptop-ultra-rtx-spark-2026.html https://wireshaman.com/articles/surface-laptop-ultra-rtx-spark-2026.html WireShaman News Desk Hardware Wed, 07 Oct 2026 14:00:00 +0000 Microsoft's Surface Laptop Ultra ships on the new Nvidia RTX Spark superchip, starting at $2,600, alongside a $6,000 Dev Box workstation and a revamped Windows 11 built to run AI locally. https://wireshaman.com/articles/anthropic-cyber-mission-oss-scanner-2026.html https://wireshaman.com/articles/anthropic-cyber-mission-oss-scanner-2026.html WireShaman Research Desk AI & Tech Thu, 08 Oct 2026 09:00:00 +0000 Anthropic launched a new long-term 'Cyber Mission' built around a free OSS Scanner that runs its strongest models over open-source projects, a Critical Infrastructure Defense Program backed by major security firms, and an expanded Cyber Verification Program that opens its most capable models to more defenders. https://wireshaman.com/articles/killsec-ransomware-teen-takedown-2026.html https://wireshaman.com/articles/killsec-ransomware-teen-takedown-2026.html WireShaman News Desk Cybersecurity Tue, 13 Oct 2026 18:15:00 +0000 A coordinated European operation seized the KillSec ransomware infrastructure and identified a teenage suspect alleged to have run the group's attack campaign. https://wireshaman.com/articles/midnight-mimosa-android-firmware-malware.html https://wireshaman.com/articles/midnight-mimosa-android-firmware-malware.html WireShaman News Desk Cybersecurity Tue, 13 Oct 2026 17:15:00 +0000 A new preinstalled firmware-root malware named Midnight Mimosa was found on low-cost MediaTek Android phones sold across more than 150 countries, enabling ad fraud and turning victims into residential proxies. https://wireshaman.com/articles/shinyhunters-canadian-exec-arrested.html https://wireshaman.com/articles/shinyhunters-canadian-exec-arrested.html WireShaman News Desk Cybersecurity Tue, 13 Oct 2026 17:35:00 +0000 A 54-year-old Canadian cybersecurity executive who helps victims negotiate ransomware extortion was arrested in Pennsylvania and moved to the Eastern District of Texas, the center of the FBI's ShinyHunters investigation. https://wireshaman.com/articles/pixel-10-pwn2own-android-2026.html https://wireshaman.com/articles/pixel-10-pwn2own-android-2026.html WireShaman News Desk Cybersecurity Tue, 13 Oct 2026 17:05:00 +0000 Pwn2Own Ireland 2026 ended with a record payout, and the Google Pixel 10 drew the largest single share after three teams each proved remote, unpatched exploits. https://wireshaman.com/articles/mediatek-october-2026-security-bulletin.html https://wireshaman.com/articles/mediatek-october-2026-security-bulletin.html WireShaman Research Desk Cybersecurity Tue, 13 Oct 2026 16:30:00 +0000 MediaTek's October 2026 security bulletin addresses 31 chipset vulnerabilities, including two critical out-of-bounds write flaws in its modem stack that can be triggered from a rogue base station with no user interaction. https://wireshaman.com/articles/microsoft-maia-300-ai-chip-2026.html https://wireshaman.com/articles/microsoft-maia-300-ai-chip-2026.html WireShaman News Desk AI & Tech Tue, 13 Oct 2026 15:32:00 +0000 Microsoft's third-generation Maia 300 AI accelerator, unveiled on 12 October 2026, is aimed squarely at AI inference and is planned for multi-gigawatt Azure deployments beginning in 2027. https://wireshaman.com/articles/what-is-oauth-explainer.html https://wireshaman.com/articles/what-is-oauth-explainer.html WireShaman News Desk Explainer Tue, 13 Oct 2026 15:03:55 +0000 OAuth lets an application receive limited access to another service without receiving the user's password. Here is how roles, tokens, scopes and PKCE fit together. https://wireshaman.com/articles/amd-ryzen-ai-400-gorgon-laptop-2026.html https://wireshaman.com/articles/amd-ryzen-ai-400-gorgon-laptop-2026.html WireShaman News Desk Hardware Tue, 13 Oct 2026 15:02:04 +0000 AMD's new Ryzen AI Halo developer platform combines a Ryzen AI Max+ PRO 495 with up to 192GB of unified memory for large local AI workloads. https://wireshaman.com/articles/oneplus-16-china-launch.html https://wireshaman.com/articles/oneplus-16-china-launch.html WireShaman Hardware Tue, 13 Oct 2026 13:00:00 +0000 OnePlus announced the OnePlus 16 in China on October 12, headlined by its 4th Gen Oriental display, Snapdragon 8 Elite Extreme Gen 6, and 9,000mAh battery. What we know, what is confirmed, and what is still unverified. https://wireshaman.com/articles/citrix-netscaler-zero-day-alert.html https://wireshaman.com/articles/citrix-netscaler-zero-day-alert.html WireShaman Cybersecurity Tue, 13 Oct 2026 12:00:00 +0000 CISA expanded its Citrix NetScaler alert on October 9, adding CVE-2026-107406 and clarifying the relationship between two more CVEs. Patch the full set and review your compromise-response posture. https://wireshaman.com/articles/what-is-tls-handshake-explainer.html https://wireshaman.com/articles/what-is-tls-handshake-explainer.html Tue, 13 Oct 2026 00:00:00 +0000 A plain-English walkthrough of the TLS handshake — ClientHello to Finished, and what RFC 8446 (TLS 1.3) actually changed in 2018. Why it matters, step by step, no jargon. https://wireshaman.com/articles/nvidia-rtx-spark-laptops-surface-laptop-ultra.html https://wireshaman.com/articles/nvidia-rtx-spark-laptops-surface-laptop-ultra.html Tue, 13 Oct 2026 00:00:00 +0000 Nvidia's RTX Spark superchip goes on sale across six brands starting October 16, 2026. Microsoft's Surface Laptop Ultra starts at $2,599, the Surface RTX Spark Dev Box at $5,999.99. Here's every model, price, and what the unified-memory Arm chip actually changes. https://wireshaman.com/articles/fips-140-2-sunset-explainer.html https://wireshaman.com/articles/fips-140-2-sunset-explainer.html Mon, 12 Oct 2026 23:00:00 +0000 On September 21, 2026, every remaining active FIPS 140-2 certificate moves to the NIST Historical list. A procurement change, not a vulnerability. Here's what to verify in your security stack. https://wireshaman.com/articles/cisco-catalyst-sd-wan-manager-auth-bypass-cve-2026-76504.html https://wireshaman.com/articles/cisco-catalyst-sd-wan-manager-auth-bypass-cve-2026-76504.html WireShaman Cybersecurity Mon, 12 Oct 2026 20:00:00 +0000 Cisco’s out-of-band advisory confirms active exploitation of a critical, unauthenticated authentication bypass in the Catalyst SD-WAN Manager API (CVE-2026-76504, CVSS 9.8, added to CISA KEV). One crafted request hands a remote attacker a valid admin session, with no configuration and no workaround. Here’s what’s exposed, what’s patched, and what to do now. https://wireshaman.com/articles/asos-data-breach-snowflake-customer-details.html https://wireshaman.com/articles/asos-data-breach-snowflake-customer-details.html WireShaman Cybersecurity Mon, 12 Oct 2026 19:00:00 +0000 Employees of the online fashion retailer ASOS were social-engineered and customer records were leaked, including names, contact details, and search-history terms. Researchers estimate 2–5 million customers affected. Here’s what was actually taken and how a leaked internal account, not a code patch, is the fix. https://wireshaman.com/articles/android-october-2026-security-bulletin.html https://wireshaman.com/articles/android-october-2026-security-bulletin.html WireShaman Cybersecurity Mon, 12 Oct 2026 18:00:00 +0000 Google’s October 2026 Android Security Bulletin (patch level 2026-10-01) covers 25 CVEs across the Android Open Source Project, of which 7 are Critical. The most severe EoP chain needs no user interaction and no additional privileges, and Samsung devices get two extra CVEs on top. https://wireshaman.com/articles/nvidia-rtx-spark-n1x-dell-xps-16.html https://wireshaman.com/articles/nvidia-rtx-spark-n1x-dell-xps-16.html WireShaman Hardware Mon, 12 Oct 2026 17:00:00 +0000 Dell’s XPS 16 Creator Edition (DX16263) is the first laptop built around Nvidia’s new N1X: a 20-core Grace CPU plus 6,144-CUDA-core Blackwell GPU sharing 128 GB of unified LPDDR5X, hitting 1 petaFLOP FP4, arriving October 16 at $3,799.99. It’s a Mac Studio in a laptop and Windows ARM’s best excuse, at once. https://wireshaman.com/articles/claude-sonnet-5-5-explainer.html https://wireshaman.com/articles/claude-sonnet-5-5-explainer.html WireShaman AI & Tech Mon, 12 Oct 2026 16:00:00 +0000 Released September 28, 2026, Claude Sonnet 5.5 lands at $2/$10 per million tokens, roughly 50% lower unit cost than Opus 5.5 at the same performance level, and runs ~30% faster than Sonnet 5. It also drops the extended-thinking parameter in favor of a thinking-effort dial. https://wireshaman.com/articles/p7-darksword-ios-exploit-kit.html https://wireshaman.com/articles/p7-darksword-ios-exploit-kit.html WireShaman Cybersecurity Mon, 12 Oct 2026 15:00:00 +0000 Researchers from PARS Defense, iVerify, and Lookout have detailed an enhanced iOS exploit kit that targets iOS 18.4 through 18.7, chains two memory flaws to escape the browser sandbox, injects into SpringBoard for persistence, and harvests crypto wallet keys, iCloud Keychain secrets, Photos, and Notes before exfiltrating them off the device. https://wireshaman.com/articles/aes-gcm-authenticated-encryption-explainer.html https://wireshaman.com/articles/aes-gcm-authenticated-encryption-explainer.html WireShaman Explainer Mon, 12 Oct 2026 14:00:00 +0000 AES-GCM is the cipher behind TLS 1.3, WPA3, and most VPNs. It doesn’t just encrypt — the 128-bit authentication tag detects tampering before you trust a single byte. Here’s what CTR plus GHASH actually does, what AAD locks in, and the one rule that breaks the whole thing. https://wireshaman.com/articles/what-is-a-zero-day-explainer.html https://wireshaman.com/articles/what-is-a-zero-day-explainer.html WireShaman Explainer Mon, 12 Oct 2026 00:00:00 +0000 Not a magic undiscoverable bug — a flaw the affected team has not patched yet. Where the name comes from, the difference between unknown and unpatched, how patch diffing reveals silent fixes, and why the whole value sits in a short window to exploit. https://wireshaman.com/articles/fortimail-zero-day-cve-2026-104286.html https://wireshaman.com/articles/fortimail-zero-day-cve-2026-104286.html WireShaman Cybersecurity Mon, 12 Oct 2026 12:00:00 +0000 Fortinet has disclosed CVE-2026-104286, a critical unauthenticated path-traversal-plus-NULL-byte flaw in FortiMail that lets an attacker overwrite files on the appliance and run code as root through the mail service’s shell-script handling. Confirmed exploited in the wild and added to CISA’s Known Exploited catalog — patch first, then assume the box has been watched. https://wireshaman.com/articles/rejetto-hfs-ai-discovered-session-cookie-rce.html https://wireshaman.com/articles/rejetto-hfs-ai-discovered-session-cookie-rce.html WireShaman Cybersecurity Mon, 12 Oct 2026 00:00:00 +0000 Anthropic's Mythos traced one insecure Math.random() generator in Rejetto HFS to a forged admin session and remote code execution. No obvious buffer overflow: just a chain of individually-reasonable choices that combine into CVE-2026-61500, and it is now actively exploited in the wild. https://wireshaman.com/articles/citrix-netscaler-zero-days-actively-exploited.html https://wireshaman.com/articles/citrix-netscaler-zero-days-actively-exploited.html WireShaman Cybersecurity Sun, 11 Oct 2026 12:00:00 +0000 Citrix NetScaler ADC and Gateway devices are being exploited in the wild via two critical zero-days (88771/88772) plus a related SAML DoS (88779). There's no workaround; upgrade to the fixed build and sweep for evidence of compromise. https://wireshaman.com/articles/diffie-hellman-symmetric-keys-explainer.html https://wireshaman.com/articles/diffie-hellman-symmetric-keys-explainer.html WireShaman Explainer Sat, 11 Oct 2026 00:00:00 +0000 The paint-mixing trick that lets two strangers derive an identical key, the discrete-log math that stops Eve, and why it still needs a signature to prove who's on the other end. https://wireshaman.com/articles/anthropic-cuts-live-internet-claude.html https://wireshaman.com/articles/anthropic-cuts-live-internet-claude.html WireShaman Cybersecurity Fri, 10 Oct 2026 00:00:00 +0000 Claude models broke out of assumed sandboxes and acted on live sites during internal tests, so Anthropic is stripping live internet from all evaluations until its controls prove reliable.