the grugq's newsletter
Archives
Search...
Subscribe
April 10, 2026
April 11, 2026
April 10, 2026 Little Snitch for Linux Discover powerful applications such as Little Snitch Mini, Little Snitch, LaunchBar and Micro Snitch. Russian...
April 8, 2026
April 9, 2026
April 8, 2026 Spooler Alert: Remote Unauth'd RCE-to-root Chain in CUPS · Hey, it's Asim CVE-2026-34980 + CVE-2026-34990: two CUPS vulnerabilities, discovered...
April 7, 2026
April 8, 2026
April 7, 2026 fml-inc/panopticon (2 stars, TypeScript) Awkward scenes aboard Artemis II as Trump stops ranting and none of the astronauts have anything left...
April 6, 2026
April 7, 2026
April 6, 2026 https://t.co/so573d0tzG ← my new old talk was released as a standalone; it's a fun story of how you go from being able to write '2' (0x32, 1...
April 5, 2026
April 6, 2026
April 5, 2026 https://t.co/qYBMCup9i6 — Drift (@DriftProtocol) April 5, 2026 A fact I hope no one ever needs to use but the way thugs track down Starlink...
April 4, 2026
April 5, 2026
April 4, 2026 Iran Imposes New ‘Cash, Grass, Or Ass’ Fee For Strait Of Hormuz — The Onion (@theonion.com) April 03, 2026 kernel alchemy pt. 1: developing...
April 3, 2026
April 4, 2026
April 3, 2026 Iran Imposes New ‘Cash, Grass, Or Ass’ Fee For Strait Of Hormuz — The Onion (@theonion.com) April 03, 2026
April 3, 2026
April 4, 2026
April 3, 2026 ludocode/onramp (206 stars, C) A portable self-bootstrapping C compiler a C compiler in portable shell c89cc.sh - standalone C89/ELF64 compiler...
April 2, 2026
April 3, 2026
April 2, 2026 At [un]prompted, the illusion that vulnerability research won’t be automated away has passed. Specifically, it was Nicholas Carlini’s talk, a...
April 1, 2026
April 2, 2026
April 1, 2026 echidna and medusa fuzz smart contracts against properties you define. Complex state transitions, edge cases in arithmetic. Fuzzing finds what...
March 30, 2026
March 31, 2026
March 30, 2026 Excerpt from an unpublished article. https://t.co/hCeqz7YHlV pic.twitter.com/4mLAOSO2Ev— thaddeus e. grugq (@thegrugq) March 29, 2026 He said...
March 29, 2026
March 30, 2026
March 29, 2026 A quick thought on RSAC (while flying home). On why the show floor keeps making promises it cant keep (and why @daveaitel actually had a valid...
March 28, 2026
March 29, 2026
March 28, 2026 A quick thought on RSAC (while flying home). On why the show floor keeps making promises it cant keep (and why @daveaitel actually had a valid...
March 25, 2026
March 26, 2026
March 25, 2026 Russia hid spy hardware in the walls of TechEx, an Ukraine defense company that builds drones. They don’t really explain what it is beyond...
March 23, 2026
March 24, 2026
March 23, 2026 🤣 pic.twitter.com/kSkw7asaqI— OSINTWarfare (@OSINTWarfare) March 22, 2026 Brb rebranding Pwn2Own as AI2Own— ϻг_ϻε (@steventseeley) March 21,...
March 22, 2026
March 23, 2026
March 22, 2026 Insane release: 26 CVEs — 4 V8 bugs by different contributors, 9 by a semi-anonymous individual (hash c6eed09) found across Chromium...
March 20, 2026
March 21, 2026
March 20, 2026 Sorry about the slight absence. Twitter changed their API which broke the newsletter. Fixed. For now... They’re telling me a great empire will...
March 17, 2026
March 17, 2026
March 17, 2026 -The Iraq War was a disaster -Yeah but if we changed one letter and tried again?— Karl Sharro (@KarlreMarks) March 16, 2026 we’re about to...
March 16, 2026
March 17, 2026
March 16, 2026 Honey, wake up, the best hot take on AI just dropped. https://t.co/Wg80zBR59e— John Hultquist (@JohnHultquist) March 16, 2026 POV: You use...
March 15, 2026
March 16, 2026
March 15, 2026 https://phenoelit.de/fx.html The EU seems to be going in the right direction when it comes to mass message scanning. Unfortunately, the fact...
Older archives