https://rootnotes.in/article/apples-new-flagship-macbook-pro-has-an-older-chip-than-the-cheaper-one Root Notes en 2026-10-30T08:40:11.342Z Apple's new flagship MacBook Pro runs an older generation of chip than the cheaper one announced the day before https://rootnotes.in/article/the-top-weakness-last-quarter-was-not-a-missing-patch-it-was-missing-logs Root Notes en 2026-10-30T08:39:58.109Z The leading security weakness last quarter was not a missing patch. It was that nobody could see what had happened https://rootnotes.in/article/nik-c2-the-victims-api-key-pays-for-the-attackers-model-calls Root Notes en 2026-10-30T07:08:21.992Z The new idea in this command-and-control framework is not that it calls a model. It is that the victim's API key pays for the calls https://rootnotes.in/article/keydrift-they-went-for-the-keys-that-encrypt-the-traffic Root Notes en 2026-10-30T06:48:34.577Z The malware on these SD-WAN controllers was not after files. It was after the keys that encrypt the traffic between branches https://rootnotes.in/article/the-catalogue-says-gitlab-the-bug-is-in-rubys-regex-engine Root Notes en 2026-10-30T06:13:46.688Z The catalogue says GitLab. The bug is in Ruby's regular expression engine, and Ruby has not issued a CVE for it https://rootnotes.in/article/mlflow-two-flaws-whose-titles-name-the-deployment-state Root Notes en 2026-10-29T12:02:03.010Z Two MLflow flaws landed the same day, and both advisory titles end with the words unauthenticated MLflow servers https://rootnotes.in/article/one-sd-wan-controller-three-entries-on-the-exploited-list-since-july Root Notes en 2026-10-29T12:01:47.524Z One SD-WAN controller has produced three entries on the exploited list since July, and each one got the shortest deadline the catalogue issues https://rootnotes.in/article/a-2-7-went-on-the-exploited-list-because-it-deletes-the-evidence Root Notes en 2026-10-29T11:34:45.059Z CISA put a 2.7 on its exploited list. It is a logging gap in VMware ESX, which is the one thing CVSS cannot score https://rootnotes.in/article/cisco-ssl-vpn-crash-the-hardening-is-the-precondition Root Notes en 2026-10-29T07:10:07.863Z Cisco says this firewall flaw is being exploited. You are only exposed if you turned on the extra authentication https://rootnotes.in/article/an-unreleased-model-wrote-five-exploit-chains-and-62-chrome-cves-came-out-of-it Root Notes en 2026-10-29T07:03:31.250Z An unreleased model wrote five working exploit chains. Chrome alone came out of it with 62 patched CVEs https://rootnotes.in/article/php2shell-has-victims-now-25-rooted-firewalls-and-a-tunnel-still-open Root Notes en 2026-10-29T05:54:31.966Z PHP2Shell has victims now: 25 rooted firewalls, three of them inside a government-affiliated network, and a tunnel the researchers think is still open