THE JDNEER

Signal Bug CVE-2026-113380 Could Keep Your Mic Live After You Hang Up

Signal Bug CVE-2026-113380 Could Keep Your Mic Live After You Hang Up

A RingRTC flaw rated CVSS 9.3 let a malicious Signal caller flood the call state machine so your hang-up never landed, keeping the mic and possibly the camera live. It was fixed in RingRTC 2.72.0 on September 4. Here is how to check your app.

The downfall of bgp.exchange: how a volunteer peering exchange lost its domain, mail and management plane in a day

The downfall of bgp.exchange: how a volunteer peering exchange lost its domain, mail and management plane in a day

In September 2026 a volunteer peering exchange lost its domain, mail and management plane in about a day. A timeline from public records.

Building a Private Network on Hetzner Cloud Behind Your Own Firewall

Building a Private Network on Hetzner Cloud Behind Your Own Firewall

Keep servers off the public internet: a Hetzner Cloud private network with one route, your own firewall as the gateway, and working configs for Ubuntu and Rocky Linux 8.

A Third of Philippine Businesses Now Use AI, but Only 17% Have a Plan to Scale It

A Third of Philippine Businesses Now Use AI, but Only 17% Have a Plan to Scale It

An AWS-commissioned study says 32% of Philippine businesses now use AI, up from 21% a year ago. But only 17% have a roadmap to scale it, and just 19% feel ready for agentic AI. Skills remain the biggest gap. Here are the numbers that matter.

Chainguard Broke the PHP Embargo by Six Hours. That Was the Wrong Call

Chainguard Broke the PHP Embargo by Six Hours. That Was the Wrong Call

Chainguard shipped fixed PHP images more than six hours before the coordinated October 21 release, citing exploits in the wild. Here is how embargoes work, what Chainguard says, and why I still think releasing early was the wrong call for open source.

Denmark's CPR Breach Is a Warning About Government Data Hoarding, and PhilSys Should Take Note

Denmark's CPR Breach Is a Warning About Government Data Hoarding, and PhilSys Should Take Note

Outsiders pulled names, addresses and ID numbers of about 8.8 million people from Denmark's CPR register through one small company's lookup account, caught only by an invoice. Here is why central registers worry me, and what PhilSys can learn.

Your Car's App May Be the Bigger Privacy Leak: Study Maps Where 21 Cars and 30 Apps Send Data

Your Car's App May Be the Bigger Privacy Leak: Study Maps Where 21 Cars and 30 Apps Send Data

Northeastern researchers tracked network traffic from 21 cars and 30 automaker apps. Most cars reached third parties, but the apps did more damage: seven sent VINs and other personal data to ad and analytics firms, and Honda changed its app in response.

Scammers Are Posing as BSP Officials, Complete With Fake IDs. Here Is How to Spot Them

Scammers Are Posing as BSP Officials, Complete With Fake IDs. Here Is How to Spot Them

The Bangko Sentral ng Pilipinas warns that fraudsters are posing as its officials with fake IDs and forged signatures, asking victims to send money to release or recover funds. BSP staff never ask for payments. Here is how the scam works and what to do.

Globe Says Its AI Projects Returned P1.2 Billion, 2.8 Times What It Spent

Globe Says Its AI Projects Returned P1.2 Billion, 2.8 Times What It Spent

Globe Telecom says its AI and machine learning work delivered P1.2 billion in measurable value as of August, about 2.8 times its AI investment, mostly from better-targeted offers. Here is how the number breaks down and what it does not tell us.

Citizen Lab: Targeted Ads Delivered Zero-Click Spyware to Al Jazeera Devices

Citizen Lab: Targeted Ads Delivered Zero-Click Spyware to Al Jazeera Devices

Citizen Lab says it has confirmed, for the first time, zero-click mercenary spyware delivered through targeted ads. Israeli firm Discover-Tech bought the ads that infected Al Jazeera devices with Candiru spyware, and its ads reached nearly 200,000 apps and sites.

GhostAction Hijacks About 1,900 GitHub Accounts to Steal CI Secrets From 30,000+ Repositories

GhostAction Hijacks About 1,900 GitHub Accounts to Steal CI Secrets From 30,000+ Repositories

GitGuardian says the GhostAction campaign hijacked about 1,900 GitHub accounts in October, targeting 30,000+ repositories and trying to pull 3,174 secrets from CI. Here is how the malicious workflows work, what GitHub did, and the steps to take now.

UPS Opens $80M Clark Hub as Central Luzon Builds a Logistics Corridor

UPS Opens $80M Clark Hub as Central Luzon Builds a Logistics Corridor

UPS opened a new $80M+ hub at Clark International Airport, 15 times larger than the old one, built to handle 46,000 packages a day and adding nearly 600 jobs. Here's what it means for Central Luzon's push to become a logistics corridor.