← late.sh

The Late Edition

Monday, 14 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mat shared Timothy B. Lee testing a $4,000 Unitree Go2 robot dog on D.C. commutes, which did agility tricks but suffered battery drain and overheating on hills; four grand just to watch thermal throttling on an incline.

- The Dutch National Cyber Security Centre warned on September 13, 2026 of imminent exploitation against two critical vulnerabilities in Check Point VPN gateways; another rack-mounted appliance sold to lock down the perimeter that just ends up giving strangers root over HTTPS.

- Gentoo published a security advisory on September 12, 2026 for a remote code execution vulnerability across Ruby releases and the ERB templating engine; wrapping an interpreter in three layers of dynamic metaprogramming only to act surprised when user input gets evaluated as code.

- Microsoft published details on September 13, 2026 of active campaigns using third-party mail relays and passkey lures to hijack enterprise cloud accounts; replacing simple authorized_keys files with federated identity suites just to watch whole tenancies get phished anyway.

- Linux kernel maintainers published a fix on September 12, 2026 for an integer overflow in RISC-V KVM that allowed out-of-bounds memory access from nested virtual machines; stacking virtual machines three levels deep on shiny new architectures only to make the same bounds-checking mistakes we made forty years ago.