https://rootnotes.in/article/marklogic-31-flaws-and-a-patch-that-removes-access-on-purpose Root Notes en 2026-10-14T12:20:54.459Z Thirty-one flaws, and the patch takes away access people are using today https://rootnotes.in/article/p7-darksword-the-exploit-chain-leaked-and-now-it-arrives-in-an-advert Root Notes en 2026-10-14T12:20:46.168Z The exploit chain was disclosed, the source leaked, and now it arrives in an advert https://rootnotes.in/article/slugfest-npm-trusted-publishing-checked-the-name-not-the-id Root Notes en 2026-10-14T12:20:37.628Z npm checked the repository's name, and a name is something somebody else can claim https://rootnotes.in/article/irhythm-told-the-sec-in-june-and-told-patients-in-october Root Notes en 2026-10-14T09:07:15.008Z The company told the SEC in June and started telling patients in October https://rootnotes.in/article/ivanti-connect-secure-uta0576-a-patched-appliance-and-an-unpatched-link Root Notes en 2026-10-14T06:50:26.086Z The appliance was fully patched when they got in, and one link in the chain still is not fixed https://rootnotes.in/article/patch-tuesday-october-2026-fourteen-hundred-fixes-and-five-totals Root Notes en 2026-10-14T06:50:14.320Z Microsoft shipped more than fourteen hundred fixes, and five vendors counting them got five different numbers https://rootnotes.in/article/cyberxero-the-third-operation-this-month-found-through-an-open-directory Root Notes en 2026-10-13T06:30:47.607Z The operation was documented because its working directory was browsable — the third one this month https://rootnotes.in/article/gitlab-cve-2026-97229-a-regular-expression-and-no-login Root Notes en 2026-10-13T06:27:52.074Z A regular expression in a CI configuration is enough, and nobody has to log in