https://rootnotes.in/article/apple-fixed-the-targeted-attack-in-september-the-oldest-iphones-waited-28-days Root Notes en 2026-10-28T10:32:13.237Z Apple fixed an exploited flaw on 28 September. The oldest supported iPhones did not get it until 26 October https://rootnotes.in/article/apple-homeview-a-camera-on-the-counter-and-two-conditions-before-it-opens Root Notes en 2026-10-28T10:18:17.093Z Apple put a camera and a microphone on the kitchen counter. The interesting part is the two conditions before it shows you anything personal https://rootnotes.in/article/apple-m6-macs-every-speed-claim-has-a-different-baseline Root Notes en 2026-10-28T10:11:40.790Z Apple's M6 Macs arrive on 6 November. Every speed claim is relative, and the machine it is relative to changes per product https://rootnotes.in/article/44-agents-came-from-one-log-line-and-the-way-in-was-a-default-password Root Notes en 2026-10-28T10:11:23.762Z The 44 AI agents everyone is quoting come from one log line. The way into those networks was a default password https://rootnotes.in/article/warp-lost-agent-traces-and-nobody-will-say-what-is-in-them Root Notes en 2026-10-28T09:41:37.289Z Warp says a vendor breach took agent trace data. Nobody has said what an agent trace contains, and that is the whole question https://rootnotes.in/article/polyshell-adobes-bulletin-still-says-it-knows-of-no-exploits Root Notes en 2026-10-28T07:34:08.892Z CISA says the Magento upload flaw is being exploited. Adobe's bulletin for it still says the company knows of no exploits https://rootnotes.in/article/yootheme-pro-10-the-scanner-drops-the-shell-and-a-person-follows Root Notes en 2026-10-28T07:07:30.315Z A 10.0 in a Joomla and WordPress template is being exploited by a scanner, with a human operator two minutes behind it https://rootnotes.in/article/brotli-is-on-the-catalogue-and-the-entry-names-a-library Root Notes en 2026-10-28T06:30:47.054Z CISA put the Brotli decoder bug on its catalogue. The entry names a library, not a product, and that is the whole problem https://rootnotes.in/article/governments-took-services-offline-before-the-php-fix-existed Root Notes en 2026-10-27T10:40:26.185Z Governments took citizen services offline before the PHP fix existed, on the strength of an advisory that said to https://rootnotes.in/article/php-115560-the-setting-we-said-was-not-a-workaround-is-now-the-advice Root Notes en 2026-10-27T10:39:55.855Z PHP has a new flaw with no patch, and the mitigation is the setting we said was not a workaround https://rootnotes.in/article/php2shell-confirmed-exploited-and-on-the-catalogue-with-three-days Root Notes en 2026-10-27T07:03:39.979Z PHP2Shell is confirmed exploited and on CISA's catalogue with a three-day deadline. We wrote yesterday that no case was public https://rootnotes.in/article/wasmtime-the-sandbox-held-and-the-compiler-did-not Root Notes en 2026-10-27T06:50:14.576Z Wasmtime's sandbox did not fail. The compiler that builds it overflowed a counter without saying anything https://rootnotes.in/article/qilin-and-inc-pull-credentials-out-of-the-virtual-disk Root Notes en 2026-10-27T06:48:48.597Z Qilin and INC are pulling domain controller credentials out of the virtual disk, with the server still running https://rootnotes.in/article/emudhra-one-of-the-private-keys-was-the-number-4 Root Notes en 2026-10-27T06:48:38.356Z One of eMudhra's certificate authority private keys was the number 4. Browsers blocked it in under two hours