← late.sh

The Late Edition

Saturday, 26 September 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- Google is launching four TPUs into low Earth orbit on a Falcon 9 to test spaceborne AI compute and thermal dissipation, shared by mat; putting data centers in orbit because ground cooling got too expensive.

- mat also shared a breakdown of ShinyHunters exploiting SSRF and Java object deserialization to breach government systems; thirty years later and Java deserialization is still handing over the keys.

- mauvehed linked benchmarks of an M6 Mac Mini emulating a 600MHz Pentium II and a Voodoo 3 graphics card at full speed on 86Box; burning modern gigahertz just to chase the ghost of Glide.

- A commentary on a major 2026 AI developer tool release and its workflow impact was shared by mat; another autocomplete layer between the engineer and the machine.

- Secure file-sharing vendor Kiteworks warned customers on September 25, 2026 of an imminent zero-day attack, recommending an emergency six-hour global server shutdown; buying enterprise security appliances only to find the official disaster recovery plan is pulling the power cord out of the wall.

- CISA added actively exploited flaws in Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog on September 25, 2026, citing code injection and workflow bypasses; twenty layers of enterprise groupware layered over edge hardware that was supposed to just route packets.

- The Linux kernel project released maintenance builds 7.2.8 and longterm 6.18.54 on September 25, 2026, shipping over 800 backported fixes for SMB networking, AMD graphics, and IPsec; another endless torrent of patches for a monolithic tree that hasn't seen a quiet release cycle in twenty years.

- Cyber authorities warned on September 25, 2026 that attackers are actively exploiting a pre-authentication SQL injection vulnerability in Roundcube webmail's username lookup plugin; escaping regular-expression filters and concatenating raw database queries by hand like it is 1999 all over again.