Sam's News — tech — 2026-08-25¶
Security¶
8 CISA issues critical three-day patching deadline for perfect-10 Oracle vulnerability¶
CISA issued a three-day patching deadline for CVE-2026-21962, a critical improper access control vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in on Windows VMs. The flaw was disclosed in January 2026 and subsequently exploited in honeypot deployments, with CVSS 10.0 rating allowing complete system compromise.
- CVE-2026-21962 (CVSS 10.0) affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in on Windows
- CWE-284: improper access control allowing data creation, deletion, modification, and complete access
- Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0
- Oracle patched January 20, 2026; CISA added to Known Exploited Vulnerabilities catalog August 24, 2026
- CloudSEK honeypot detected exploitation attempts between January 22–February 3, 2026
- CISA warning issued August 24, 2026
- CVE-2026-21962—CVSS 10 RCE in Oracle WebLogic and HTTP Server
- Unauthenticated exploitation possible; patches released January 2026
- Exploitation began January 2026 after PoC disclosure
- China-linked group targeting government infrastructure (June–July 2026)
Sources: The Register AI Web Searched, SecurityWeek AI Web Searched
7.5 Sleepwalker Windows backdoor shows signs of sophisticated, well-resourced threat actors¶
Security researchers discovered Sleepwalker, a sophisticated Windows backdoor with 23 custom commands hidden inside a spoofed DLL, indicating development by a well-resourced threat actor. The passive malware remains dormant until activated by a specific network packet and uses in-memory code execution to evade detection.
- Sleepwalker backdoor contains 23 custom instructions in proprietary command language
- Masquerades as Microsoft's dpapi.dll, exports same seven legitimate functions
- Loads via side-loading into ESET Management Agent (ERAAgent.exe)
- Passively monitors network packets for activation pattern; supports VMware VMCI targets
- Dormant in memory to avoid antivirus detection; reverse-engineering required to decode commands
Sources: The Register AI Web Searched
7.5 Malware Distributed via Fake OpenAI Codex Sponsored Search Results¶
Attackers are distributing ClickFix malware to macOS developers through fraudulent Google search ads impersonating OpenAI Codex. The fake ads lead to a Google Sites page instructing users to paste a terminal command that decodes and executes attacker-controlled shell scripts, bypassing macOS security warnings.
- Campaign targets macOS developers searching for Codex downloads via sponsored Google results
- Fake page on Google Sites instructs users to run terminal command with Base64-encoded URL payload
- Script removes macOS security information, bypassing typical download warnings before launching
- Final malware is universal Mach-O executable running natively on Intel and Apple Silicon
- Substantial similarities to Atomic macOS Stealer (AMOS) infostealer
Sources: The Register AI Web Searched
Obituary¶
8 Dolly Parton Dies at 80¶
Dolly Parton, the country music icon, actor, and philanthropist, died on August 25, 2026, at age 80. Over a six-decade-plus career, she became one of the world's most successful entertainers, with iconic hits including
- Died August 25, 2026, at age 80
- 46 Grammy nominations, tied for most
- Over 100 million units sold worldwide
- Husband Carl Dean died March 2025
Sources: ABC News AI Web Searched, Yahoo Entertainment AI Web Searched, Hacker News (front page) RSS
Space¶
7.5 Nancy Grace Roman Space Telescope Launch Scheduled for August 30¶
NASA's Nancy Grace Roman Space Telescope is scheduled to launch August 30 aboard a SpaceX Falcon Heavy from Kennedy Space Center, nine months ahead of schedule and under budget. With a 7.9-foot mirror matching Hubble's but a field of view 100 times larger, the $4 billion mission will survey billions of galaxies and search for distant exoplanets.
- Launch: August 30, 2026, 7:26 a.m. EDT from Kennedy Space Center
- $4 billion mission, completed under budget and nine months early
- 7.9-foot primary mirror; field of view ~100× larger than Hubble
- Projected to discover 200,000 potential exoplanets and survey 1 billion+ galaxies
- Will orbit Sun-Earth L2 point, ~930,000 miles from Earth
Sources: ECIKS.org AI Web Searched, WRAL.com AI Web Searched, Engadget RSS
7.5 SpaceX Plans Up to $100 Billion Investment in Louisiana Spaceport¶
SpaceX announced plans to build a $100 billion launch facility in Louisiana for its Starship megarocket operations.
- Up to $100 billion investment planned
- 125,000 acres in Pecan Island area
- Construction begins 2027, first launch by 2029
- Includes coastal erosion prevention partnership
Sources: Ars Technica AI Web Searched, Phys.org RSS, Space.com RSS, TechCrunch RSS
AI¶
7.5 Stanford study: AI adoption disproportionately impacts entry-level employment¶
A Stanford research study finds that artificial intelligence is hitting entry-level positions and workers hardest.
- Entry-level workers (age 22–25) in AI-exposed fields: 19% employment decline vs. AI-resistant fields
- Gap expanded from 13% year-over-year
- Top 40% AI-impacted jobs for young workers: ~11% employment drop since 2022
- Bottom 60% least AI-impacted jobs for young workers: 10% employment growth since 2022
- Older workers largely unaffected by AI disruption so far
Sources: Ars Technica AI Web Searched
7 Thomson Reuters Launches Proprietary Frontier AI Model¶
Thomson Reuters launched its frontier AI model, called CoCo, leveraging 175 years of proprietary legal, financial, and news data. The model integrates into the company's enterprise applications including CoCounsel, Westlaw, Practical Law, HighQ, and CoCounsel Audit & Accounting.
- Model name: CoCo, built on 175 years of proprietary data
- Integrated into five Thomson Reuters enterprise AI products for law, tax, audit, and accounting sectors
Sources: Thomson Reuters AI Web Searched, Hacker News (front page) RSS
Hardware¶
7.5 OpenAI announces Jalapeño chip for faster AI inference¶
OpenAI's Jalapeño model demonstrates industry-leading performance in speed and efficiency for AI inference tasks.
Sources: OpenAI RSS, TechCrunch RSS, The Verge RSS, The Register RSS
7.5 Apple launches Mac Studio with M5 Ultra chip¶
Apple announced the M5 Ultra and M6 chips powering new Mac Mini and Mac Studio models. The M5 Ultra is Apple's first quad-die chip with up to 36 CPU cores and 80 GPU cores; the M6 features a 2nm process with 12-core CPU, Dual 16-core Neural Engine, and 30% improvement in AI peak GPU compute over the M5.
- M5 Ultra: quad-die (two fused dual-die M5 Max), up to 36 CPU cores, up to 80 GPU cores, 1.2 TB/s unified memory bandwidth
- M5 Ultra bandwidth 50% greater than M3 Ultra (released ~18 months prior)
- M6: 2nm process, 12-core CPU, Dual 16-core Neural Engine, 2 additional cores vs M5
- M6 provides ~30% increase in peak GPU compute for AI vs M5
- Mac Mini M6 base model available for pre-order from $899; shipping begins September 22, 2026
Sources: TechCrunch AI Web Searched, The Verge RSS, Wired RSS, Engadget RSS, Hacker News (front page) RSS