The Wire
Curated cybersecurity and tech news — AI-summarized, source attributed.
Microsoft ships out-of-band patches after April updates crash Windows Server domain controllers
Microsoft pushed emergency updates across every supported Windows Server release after the April 2026 Patch Tuesday rollout broke core infrastructure. The prima
Nexcorium Mirai Variant Weaponizes TBK DVR Flaw CVE-2024-3721 for DDoS Swarm
A fresh Mirai descendant dubbed Nexcorium is actively enlisting TBK-branded digital video recorders into a DDoS botnet by abusing CVE-2024-3721, a command injec
NIST Drops Severity Scoring for Low-Priority CVEs as Submission Volume Overwhelms NVD
NIST is officially scaling back the National Vulnerability Database. As of April 15, only CVEs that hit specific thresholds — presence in CISA's Known Exploited
Opus 4.7's New Tokenizer Inflates Text Costs ~40% at Same Sticker Price
Simon Willison extended his Claude Token Counter tool to compare token counts across model versions, surfacing a concrete cost implication of Anthropic's update
Opus 4.7's New Tokenizer Inflates Text Costs ~40% Despite Unchanged Pricing
Simon Willison extended his Claude Token Counter to compare token usage across models, surfacing a practical consequence of Opus 4.7's updated tokenizer. Anthro
Phishers abuse Apple account-change alerts to smuggle scams past spam filters
Attackers are weaponizing Apple's own account notification system to deliver callback phishing lures from legitimate Apple infrastructure. By creating an Apple
protobuf.js RCE: unsanitized schema identifiers pipe straight into Function()
A critical remote code execution flaw in protobuf.js, the JavaScript port of Google's Protocol Buffers that pulls roughly 50 million weekly npm downloads, lets
Pulling Datasette Query Results into Google Sheets via importdata and Apps Script
Simon Willison documents three patterns for piping live data from a Datasette instance into Google Sheets. The simplest path is the built-in IMPORTDATA() functi
Sanctioned Grinex Exchange Halts Operations After $13.74M Breach
Grinex, a cryptocurrency exchange already under international sanctions, has suspended operations following a $13.74 million theft. The incident comes amid inte
Vercel breach traced to compromised Context.ai OAuth app, non-sensitive env vars harvested
Vercel disclosed that attackers reached internal systems through a third-party AI platform, Context.ai, whose compromise exposed a Vercel employee's Google Work
Vercel Credential Leak Traces Back to Context AI Compromise
Vercel has disclosed a security incident in which a limited set of customer credentials were exposed through a downstream breach at Context AI, a third-party se
ZionSiphon Malware Hits Israeli Water and Desalination OT Infrastructure
Researchers have identified a new malware strain dubbed ZionSiphon targeting operational technology systems at Israeli water and desalination facilities. The ca