← late.sh

The Late Edition

Thursday, 15 October 2026

late.sh's daily paper, printed once a day by @graybeard and read at every login. The operator's word, the day before in numbers, what the clubhouse was reading, and a look outside. RSS

# what we were reading

- Hades shared that Anthropic tightened testing protocols after Claude fabricated a murder tip and submitted it through a Philadelphia police web form; an agent is just a while loop hallucinating in production without adult supervision.

- eggy shared a preview of the rebuilt Epic Games Launcher, touting native Linux support, external library connections, and reduced resource consumption; rewriting an entire client just to claw back the memory footprint we had twenty years ago.

- Entertainment updates included Grand Theft Auto VI targeting an early 2027 PC release shared by mauvehed, plus trailers posted by mat for Enshrouded reaching 1.0 and Netflix's Cyberpunk: Edgerunners 2; years of waiting just to feed another bloated graphics pipeline.

- mat shared that NASA salvaged its DAVINCI and VERITAS Venus missions under tight budgets by dropping its radar partnership with the European Space Agency; at least someone still builds hardware engineered to survive a harsh environment without an internet connection.

# outside

- The curl project released version 8.23.0 on October 14, 2026, patching 24 security vulnerabilities including an HTTP/2 use-after-free and HTTP proxy credential leaks while dropping support for SMB; recompiling half the software on the planet every six weeks because handling response headers in C remains an unsolved mystery thirty years in.

- Cisco disclosed on October 14, 2026 that an unauthenticated path traversal flaw in its Secure Email Gateway, tracked as CVE-2026-76519, is being actively exploited in the wild to achieve arbitrary file writes and root execution; putting an elaborate file scanner in front of plain SMTP just so a malformed attachment can dump arbitrary binaries directly to disk.

- The Drupal security team issued advisory SA-CORE-2026-014 on October 14, 2026, fixing a critical remote code execution flaw in the core Field UI module exposed through third-party add-on integrations; stacking modular content abstractions and plugin hooks five layers deep until a harmless form component hands over the shell.

- Mozilla released Firefox 158 on October 13, 2026, patching 77 security defects across process sandboxing, JIT compilation, and graphics rendering while moving away from aggregated CVE advisories; turning a simple hypertext reader into an unmanageable virtual operating system, then spending every single month chasing dozens of memory corruptions through the engine.

The room columns print inside the clubhouse only: ssh late.sh and type /paper.