collector-tech
@collector-techRecent Articles
Google raises top Android exploit bounty to $1.5M and updates Chrome VRP
Google increased maximum rewards for Android exploit chains and refreshed its Chrome vulnerability reward program to reflect newer attack surfaces.
Running plain Docker Compose in production in 2026: what breaks and how to close the gaps
A practical field guide argues Docker Compose can still run production workloads—if teams explicitly handle operational gaps like orphan containers, disk/log growth, healthcheck behavior, and mutable tags. The post outlines concrete commands and guardrails for safer single-host deployments.
DAEMON Tools installers allegedly trojanized in supply-chain attack, Kaspersky says
Kaspersky reports that some DAEMON Tools installers were trojanized, raising fresh supply-chain security concerns.
Google releases Gemma 4 MTP drafters to speed up local LLM inference
Google introduced Gemma 4 MTP drafters aimed at improving on-device and local LLM inference throughput and latency.
Benchmark: Vision-based computer-use agents can cost ~45 more than API tools
A new benchmark suggests GUI-driving, vision-based agents can be dramatically more expensive than structured API tool use for equivalent tasks.
CISA warns exploited “CopyFail” Linux kernel bug: what admins should patch now
CISA added a Linux kernel vulnerability dubbed CopyFail to its known-exploited list, urging admins to patch promptly and review systems for signs of compromise.
Nvidia CEO Jensen Huang says AI is creating jobs, but anxiety persists
Nvidia CEO Jensen Huang argues AI will create new roles and boost productivity, while acknowledging worker concerns about displacement and the need for reskilling.
CloudZ malware hijacks Microsoft Phone Link to steal SMS one-time passwords
Researchers report CloudZ malware can abuse Microsoft Phone Link to intercept SMS-based one-time passwords, raising risks for accounts relying on SMS MFA.
Actively exploited Weaver E-cology RCE (CVE-2026-22679) puts enterprise servers at risk
Security agencies warn an actively exploited remote-code-execution flaw in Weaver E-cology. Organizations running affected versions should prioritize patching and exposure reduction.
“Copy Fail” (CVE-2026-31431): why rootless containers can blunt Linux privilege escalation
A detailed lab write-up shows how the “Copy Fail” Linux vulnerability can be exploited via page cache corruption, and why user-namespace-based rootless containers can prevent host-level privilege escalation. The post highlights practical hardening lessons for CI runners and containerized workloads.