01 — The Register
Amazon says its honeypots recorded PHP2Shell targeting on October 17, before public disclosure and patches, The Register reports. Cloudflare subsequently counted millions of attempts against the two PHP runtime flaws, which can allow unauthenticated code execution. Whether the early attempts would have succeeded on real systems remains unclear. Amazon advises investigating suspicious activity dating back to October 17.
Why it matters
PHP administrators need to patch and investigate earlier activity; firewall protections cannot substitute for fixing the runtime.
Read the source →02 — The Register
Microsoft says China-linked Storm-0940 used compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, The Register reports. Most attempts failed, but attackers established persistent privileged access at numerous organizations. Microsoft says AI tooling accelerated some attacks to under three hours. The number of compromised customers and any data theft remain undisclosed.
Why it matters
Permissions granted to a service provider can become an intrusion route, and revoking its original credentials may leave attacker-created access intact.
Read the source →03 — The Verge
Elon Musk says Tesla has started early Optimus production in Fremont, The Verge reports. But its hands, durability, safety, and software still need work, and Tesla disclosed neither production totals nor autonomous task success rates. Musk projects possible outside deliveries around late 2027; robotics researcher Ken Goldberg doubts the hardest problems will be solved that quickly.
Why it matters
Manufacturing progress offers little assurance about whether customers can depend on humanoid robots for everyday industrial work.
Read the source →04 — The Verge
The Verge’s testing found Meta’s Muse blocked by Amazon and inconsistently admitted by Target, limiting searches and price comparisons. On The RealReal, however, the reporter could repeatedly reserve ten items without buying them, keeping other shoppers out all day. The tests expose both unreliable access and ways automation can disrupt a marketplace that welcomes agents.
Why it matters
Retailers’ access policies and reservation rules will shape whether shopping agents save time or create new frustrations.
Read the source →05 — Ars Technica
A researcher reports that attackers took over more than 300 Tor exit nodes, favoring unencrypted email traffic and redirecting SSH connections through their servers, according to Ars Technica. Tor volunteers traced the initial management-server intrusion to a reused password. Attackers installed the Ebury Linux backdoor, though questions remain about how they accessed a second server.
Why it matters
Compromised exit infrastructure puts unencrypted traffic at risk and makes careful connection authentication especially important.
Read the source →06 — Ars Technica
UNEP has acknowledged that keeping warming below 1.5°C is no longer viable, Ars Technica reports. Its focus is now minimizing how far temperatures exceed that threshold and for how long. The approach calls for steep emissions cuts now and removing hundreds of gigatonnes of carbon dioxide before the century ends.
Why it matters
The revised framing makes emissions cuts and large-scale carbon removal complementary demands, while keeping the size and duration of overshoot consequential.
Read the source →07 — Simon Willison
Simon Willison urges PHP users to upgrade after updates across PHP 8.x addressed two remote-code-execution flaws. Citing the PHP Foundation, he describes how circulating vulnerability identifiers and a mistakenly published demonstration video disrupted disclosure and accelerated exploit development. The project moved its patch release forward by a day.
Why it matters
The account shows how partial leaks can shorten defenders’ preparation time even before complete technical details become public.
Read the source →08 — GitHub
GitHub describes replacing repository-wide write serialization with ordering per reference, allowing pushes to different branches to proceed concurrently. Its internal tests found three to four times higher throughput for writes to different references, with lower latency. The change supports its Azure migration and a planned separation of durable storage from independently scalable read replicas.
Why it matters
The engineering lesson is practical: coordinate only the state that needs ordering, so network latency does not serialize unrelated work.
Read the source →