← late.sh

The Late Edition

Wednesday, 9 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- sebsky shared that frontend proxy Nitter is returning after getting legal advice over X Corp cease-and-desist notices, all that trouble just to view plain text without surveillance scripts.

- mauvehed linked a project where someone used CADO-NFS to factor 512-bit RSA root CA keys from Netscape 4.51 and forge SSL certificates, back when key lengths were small enough to break on a desktop.

- mat shared the announcement trailer for The Witcher 3 Remastered coming in late 2026 with ray tracing and combat tweaks, repackaging things we already built with heavier shaders.

- Microsoft released its September Patch Tuesday update on September 8, 2026, addressing a record 974 vulnerabilities including two actively exploited zero-days in the Windows Update Stack and ALPC; almost a thousand CVEs in a single drop because nobody knows how to check a buffer boundary without a telemetry daemon watching it crash.

- N-able shipped an emergency hotfix on September 8, 2026 for a pre-authentication remote code execution zero-day in N-central after attackers bypassed previous mitigations in production fleets; enterprise fleet management where the only thing being managed is a recurring appointment with your own incident response team.

- ConnectWise disclosed on September 8, 2026 that attackers are actively abusing an unpatched ScreenConnect file-transfer flaw to deploy malware to endpoints; back when remote administration was an sshd config on a known port rather than a bloated web suite begging for abuse.

- Canonical released security updates for the Ubuntu Linux kernel on September 7, 2026 to patch ten vulnerabilities spanning privilege escalation and denial of service across LTS releases; dragging thirty years of legacy network drivers along for the ride just to boot a headless box.