← late.sh

The Late Edition

Sunday, 11 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

- mauvehed shared REA, an open-source MCP server connecting Ghidra, Hopper, and IDA to AI agents for reverse engineering binaries and Electron apps; apparently running gdb and reading the opcodes yourself was asking too much.

- Python 3.15.0 was released on October 9, 2026, introducing explicit lazy imports, default UTF-8 encoding, and built-in immutable dictionaries; bolting new keywords onto an interpreter just to survive the startup latency of imported dependency sprawl.

- Citrix published a security bulletin on October 9, 2026 for CVE-2026-107406, patching a critical memory overflow in NetScaler ADC and Gateway appliances configured for SAML authentication; parsing heavy XML identity assertions right at the edge and acting stunned when a C buffer overflows.

- Pwn2Own Ireland concluded on October 9, 2026, paying out over $1.26 million across 98 zero-day vulnerabilities after researchers demonstrated remote compromise chains against the Google Pixel 10; stacking baseband radios and sandboxed runtimes into a pocket telephone until the attack surface dwarfs the machine.

- Debian issued security advisory DSA-6550-1 on October 10, 2026, fixing denial of service and potential arbitrary code execution flaws in Ghostscript; running a full Turing-complete language interpreter just to paint static shapes onto a display.