Tech articles on Web development, AI, and frontend engineering.
CISA added this flaw to the KEV catalog on August 24, 2026 with a remediation deadline of August 27. Exploitable over the network without authentication and scored 10.0 under CVSS 3.1, here are the affected versions, the patch to apply, and Oracle's own stance on workarounds.
This Week in AI, 8 Items — Frontier Models Aim at Finding Vulnerabilities and Drug Development, and Mistral Releases a 1-Trillion-Parameter Model's Weights
Read the latest issue →This week's five stories each had one place to stop: do not allow "Accessibility" to a fake app, do not call the number on a fake PC warning, stop at a personal-account payee in a celebrity investment group, refuse seafood you declined, and do not tap a courier SMS URL. The four engineer alerts have updates on KEV listing and NVD status. Quiz.
A text saying a parcel was taken back, or a robocall from a number starting with "+". Based on what Sagawa Express, Yamato Transport and Japan Post officially say, and the Council of Anti-Phishing Japan's September report: how to check a parcel without tapping the link, and what to do if you already did.
Phone pitches for seafood that end in unwanted cash-on-delivery parcels tend to rise at year-end in Japan. Based on the National Consumer Affairs Center of Japan's October 28 warning: how the scheme runs, what to do when a parcel arrives, the 8-day cooling-off window, and how to brief a parent.
A critical flaw in self-managed GitLab, CVE-2026-97229, was added to CISA's Known Exploited Vulnerabilities catalog on October 29. A second flaw of the same kind, CVE-2026-110264, was fixed on October 21, so the October 12 release is not enough. Which versions to update to, and what to check.
On 8 October 2026 Uber described how it built an AI agent for its legal team. A Word add-in suggests accept, reject or modify for each edit a counterparty makes to a contract, adds a comment and a risk flag, and lawyers decide every suggestion. Those decisions feed the next suggestions. The post gives only two results, and does not say how the 91% figure was measured.
You are lured into an "investment group" by a social media ad or an account using a celebrity's name, then told to send money to an assistant's personal bank account. Based on a September 1 warning from Japan's National Consumer Affairs Center and the National Police Agency's end-of-August statistics, here is where to stop and what to do if you have already paid.