Blog — Page 50
Engineering notes, case studies, and lessons from the field.
Critical Cisco IMC Auth Bypass Lets Attackers Seize Full Server Control — CVE-2026-20093 (CVSS 9.8)
Cisco patched a critical unauthenticated authentication bypass in its Integrated Management Controller that gives attackers admin-level hardware control over UCS rack servers and over a dozen appliances. No credentials needed.
North Korea Stole $285M from Drift Protocol Using a Solana Feature Built for Convenience
Attackers linked to North Korea exploited Solana's durable nonces to pre-sign transactions weeks in advance and seize control of Drift's multisig, draining $285M in the largest DeFi hack of 2026. The platform has suspended deposits and withdrawals.
Oracle Cuts 30,000 Jobs — Roughly 18% of Its Workforce — to Fund AI Data Centers
Oracle began terminating up to 30,000 employees on March 31 with no prior warning, redirecting the payroll savings toward a $156 billion AI infrastructure buildout. It is the largest layoff in the company's 47-year history.
Cloudflare Built a Next.js Clone in One Week With AI — Vercel Found 7 Security Holes in Two Days
Cloudflare's experimental vinext framework reimplements the full Next.js API surface on top of Vite and ships 4.4x faster builds. Within 48 hours of release, Vercel disclosed seven vulnerabilities — two of them critical — exposing the limits of AI-generated infrastructure code.
CVE-2026-0625: Critical RCE in Legacy D-Link Routers Is Being Actively Exploited — No Patch Coming
A CVSS 9.3 command-injection flaw in discontinued D-Link DSL gateway models is being exploited in the wild for remote code execution and botnet recruitment. D-Link has confirmed it will never release a patch. If you have one of these devices, replace it now.
MCP Hits 97 Million Installs as It Becomes Standard AI Agent Infrastructure
Anthropic's Model Context Protocol crossed 97 million monthly SDK downloads on March 25, making it the fastest-adopted AI infrastructure standard in history. OpenAI, Google, Microsoft, and Mistral all integrated MCP support by mid-March 2026.
Nvidia Invests $2 Billion in Marvell, Launches NVLink Fusion to Co-opt Custom Chip Rivals
Nvidia has made a $2 billion equity investment in Marvell Technology and announced NVLink Fusion, a platform that integrates Marvell's custom AI accelerators directly into Nvidia's high-speed interconnect fabric. The deal signals Nvidia's shift from closed GPU clusters toward an open, partner-integrated AI infrastructure stack.
Chrome Zero-Day CVE-2026-5281 Actively Exploited — Patch Now
Google has patched a use-after-free vulnerability in Chrome's WebGPU implementation (Dawn) that is being actively exploited in the wild. CISA added it to the Known Exploited Vulnerabilities catalog with a federal patch deadline of April 15.
SpaceX Files Confidentially for IPO Targeting $1.75 Trillion Valuation and June Listing
SpaceX submitted a confidential IPO registration to the SEC on April 1, targeting a June 2026 public offering that could raise up to $75–80 billion — more than double the previous record held by Saudi Aramco. The filing follows SpaceX's February merger with Elon Musk's xAI.
Page 50 of 61 · 549 articles