Tech articles on Web development, AI, and frontend engineering.
CISA added this flaw to the KEV catalog on August 24, 2026 with a remediation deadline of August 27. Exploitable over the network without authentication and scored 10.0 under CVSS 3.1, here are the affected versions, the patch to apply, and Oracle's own stance on workarounds.
This Week in AI, 10 Items — A Cyber Model That Builds Exploits Arrives Behind Approval, Open Weights Promised, and Agent Platforms and Power Commitments Line Up
Read the latest issue →Japan's National Police Agency warns about "yami-baito" recruitment on social media and message boards that hides the job and promises very high pay. In 2025, 12,178 people were identified as suspects in cleared money-making crimes believed to involve anonymous, fluid criminal groups, including 1,322 minors. We cover the warning signs and what to do if you are invited, or have already applied.
CVE-2026-19868 in the SSL VPN of SonicWall's firewall OS, SonicOS, was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on November 6. Someone holding valid credentials for an alternate authentication method may bypass SAML authentication, including SAML-enforced MFA. We cover the affected builds we could confirm, what to do today, and what we could not confirm.
This week's five stories each had one way to check: ask 188 about a legal letter, open Amazon only through the app or your bookmark, never send a photo and call the police, call back only a number you looked up, and never open a "police website" URL. The five engineer alerts (six CVEs) have updates on KEV listing and NVD status. Quiz.
Kyodo News reported on October 31 that Japan's National Police Agency (NPA) confirmed a fake site imitating its own homepage. Fake Tokyo police and Shizuoka police sites were tied to 6 cases and about 8.5 million yen in losses. Police never show arrest warrants on a website.
Japan's National Police Agency announced that its "information-sharing cooperation," in which police and 30 financial institutions share data on accounts used in fraud, goes nationwide on November 9. Special fraud from January to September 2026 reached 33,329 cases and ¥261.04 billion. We cover how to verify a contact, how to prepare for fake contacts, and where to get help in Japan.
CVE-2026-76418 in Cisco's ASA and FTD firewall software was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on October 29. A device with secondary authentication on its SSL VPN can be made to reload by an unauthenticated, crafted request, taking the VPN down. Fixed releases exist; Cisco lists no workaround but one mitigation. We cover which configuration to check, which version to move to, and what we could not confirm.