Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own#P2OBerlin
‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017.
Website: https://t.co/f5G6KnEv35
Write-up: https://t.co/W86Pz2PC6C
GitHub: https://t.co/zAMTC6nTRk
It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su.
Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise.
Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.
When you stream Spotify to Bluetooth speakers or headphones, the audio comes over the network lossily compressed with Vorbis or AAC codecs, is then decoded on your device to 48 Khz raw samples, then the Bluetooth stack lossily re-compresses it with SBC or AAC codecs before sending it over the airwaves to the speakers.
I don’t have “golden ears” to pick apart audio quality like I can with, say, missing gamma correction on texture filtering, but that still hurts my system optimization soul. It is likely over-optimization, but It would be cleaner if there were a way to send bluetooth-ready, compressed audio directly.
2nd iteration makes me happier... but not happy enough. Next: tad shorter chain, more elegant wiggle, keys on the back loop (thinking also about getting rid of the other loops and maybe scaling the chain links up a little). #bateyd#screenshotsaturday#IndieGameDev#UnrealEngine
New Pause and new Settings Menus, really wanted to offer graphics options so you can enjoy #bateyd on older systems too (...and future proof it against tomorrow's cards with an over-the-top "Epic!" mode). #indiedev#UnrealEngine#lumen
After a long time sliding around silly, cats finally start moving naturally. It took a tad more work than expected, but the results are totally worth the effort! #screenshotsaturday#indiedev#animation#UnrealEngine
been a while since #bateyd last update: dev took all my energies, but it was worth it! Improvements and new features. First of all, The Beast now SLEEPS! ...unless you wake 'em up or they get hungry. Significantly broadens your strategic options. #indiedev#devlog#UnrealEngine
The "meditation menu" got an appropriately Mandala-inspired background. It plays slightly differently each time. Here are some samples from three different nightmares. #bateyd#screenshotsaturday#devlog#indiedev