Day: October 23, 2026

This Week In Security: Record Patch Tuesday, PHP’s Bad Time, The Oldest Vuln, AI Armies, And More

October 23, 2026 by 26 Comments

It’s no longer a proper month without Microsoft breaking its own record for security fixes, and October’s Patch Tuesday was no exception. Brian Krebs brings the roundup: more than 1,400 vulnerabilities fixed in a single batch, dwarfing September’s record of nearly 1,000, which itself was about ten times the normal monthly load. According to Tenable, Microsoft has now passed 4,000 CVEs for the year with two months still to go.

Only one of the fixes is for a vulnerability already being exploited in the wild: CVE-2026-96951, a security feature bypass in the Windows Shell affecting Windows 10, 11, and some Server versions. A .NET Framework bypass, CVE-2026-108398, was publicly disclosed before the patch, giving attackers a head start, and with modern AI tooling, it seems like not much of a head start is needed. At least 78 of the bugs are rated critical, and most of those allow remote code execution with little or no user interaction. Windows 10 holdouts can relax a little: Microsoft quietly extended free updates through October 2027.  Given the pace of exploitation, this is probably the only way to prevent an Internet-scale meltdown.

Microsoft credits LLM-driven bug hunting for the volume, which leaves the poor admins who have to test and deploy all of this in an unenviable spot. Fortra’s analysis shows that only 26 Microsoft vulnerabilities have landed in the CISA KEV catalog of actively exploited bugs so far this year, so start there. For the rest, the SANS Internet Storm Center and Cisco Talos have the usual breakdowns by severity. Or, you know, just patch everything and hope for the best, which is roughly what everyone does anyhow.

Continue reading “This Week In Security: Record Patch Tuesday, PHP’s Bad Time, The Oldest Vuln, AI Armies, And More” →

Rear view of the sand rail whizzing by.

When You Can’t Pick Between Electric And Jet Power, This Buggy Has You Covered

October 23, 2026 by 25 Comments

Technically, what [Macona] built with a surplus Garrett GTP30-150(F) turbine is not a dune buggy, but a sand rail, but it does have the delightfully rare combination of electric and turbine drive that is absolutely worth wading through a 53-page forum thread to learn about.

The turbine came bare as surplus, but [Marcona] used a pair of Kia/Hyundai HSG water-cooled motor-generators to turn it back into something very much like the APU it likely started out as. That’s APU as in “Auxiliary Power Unit” in this context, the little generator that keeps the lights on when your plane is sitting on the tarmac. That went into the sort of frame you’d once have put a VW bug engine in — and the 150 HP off the shaft of the turbine beats anything you’ll get with Wolfsburg’s little boxer motor, even after losses in the generator and motors. Even better, the whole assembly, which uses the electric motor from a Mitsubishi Outlander, likely doesn’t weigh any more than the internal combustion engine and transmission, so whatever you call this little off-roader it ought to move well. It certainly seems to in the demo video embedded below.

What it doesn’t do is sip fuel, the T-62 being rated at 19.3 gallons/hr at full load. Fuel efficiency is definitely not the motivation here. He’s absolutely not saving money, especially not with what jet fuel costs these days. It’s one of those projects done purely for the joy of it — where if you have to ask why, you’re barking up the wrong tree. The vehicle isn’t yet street legal, but [Marcona] is working on it.

If you do like the idea of this kind of series hybrid drive, Edison Motors of Canada is working on bringing it both to semitrucks and heavy trucks, and that is motivated by fuel savings. Continue reading “When You Can’t Pick Between Electric And Jet Power, This Buggy Has You Covered” →

DOOM Ported To A $30 Clamp Meter

October 23, 2026 by 11 Comments

DOOM. Boil it, mash it, stick it in a stew, it’s the game that runs on anything and everything. Now, the classic shooter is running on a rather unlikely target—a cheap clamp meter of very limited resources, thanks to the work of [Artur Bieniek].

The clamp meter in question is the FNIRSI DMC-100, which can be had for the low price of just $30 or so if you know where to look. It’s a far cry from the many thousands of dollars you’d pay for a heavy old 486-based machine back in 1993. [Artur] got the doomgeneric engine running on the Artery AT32F415 chip that runs the clamp meter.

The chip is pretty capable, with its 150 MHz clock speed, though the 32 KB of RAM posed rather a big limitation to the project. It may be one of the lowest RAM DOOM ports out there. Even with this limit, [Artur] was able to get Episode 1 of Freedoom: Phase 1 loaded on to the thing, including E1M1 to E1M9 along with the title screen, intermissions, the finale, the menu, and four save slots. Color graphics are displayed on the meter’s 320 x 240 screen, and there are even sound effects on the built-in buzzer. Controls are mapped to the rather curious choice of a DJI RC-N1 drone controller.

We’ve seen DOOM running on everything from desk phones to completely custom CPUs. These days you have to try pretty hard to find something it hasn’t already been ported to.

Continue reading “DOOM Ported To A $30 Clamp Meter” →