Toggle light / dark theme

It’s one of the most often asked questions I get, while showing off the Moon to the public. “Can you see the flag the astronauts left there?”

This then leads to a discussion on how far the Moon is, versus the difficulty of seeing a 1.5 by 0.9 meter flag at such a distance. My scope is good, but not that good.

During the US Apollo program, six crewed missions landed on the Moon starting with Apollo 11 in 1969, leaving a like number of flags. Now, China recently announced that one more flag will join the collection in late 2026, when Chang’e 7 heads to the Moon.

Researchers have discovered two sets of ancient wave ripples on Mars, signatures of long-dried bodies of water preserved in the rock record. Wave ripples are small undulations in the sandy shores of lakebeds, created as wind-driven water laps back and forth. The two sets of ripples indicate the former presence of shallow water that was open to the Martian air, not covered by ice as some climate models would require.

Ripples are one of the clearest indicators of an ancient standing body of water that can be provided by the geologic record. The team estimates that the ripples formed around 3.7 billion years ago, indicating that the Martian atmosphere and climate must have been warm and dense enough to support liquid water open to the air at the time.

The research is described in a paper appearing in the journal Science Advances. Caltech’s John Grotzinger, Harold Brown Professor of Geology, and Michael Lamb, professor of geology, are principal investigators on the study.

Threat actors are exploiting an unspecified zero-day vulnerability in Cambium Networks cnPilot routers to deploy a variant of the AISURU botnet called AIRASHI to carry out distributed denial-of-service (DDoS) attacks.

According to QiAnXin XLab, the attacks have leveraged the security flaw since June 2024. Additional details about the shortcomings have been withheld to prevent further abuse.

Some of the other flaws weaponized by the distributed denial-of-service (DDoS) botnet include CVE-2013–3307, CVE-2016–20016, CVE-2017–5259, CVE-2018–14558, CVE-2020–25499, CVE-2020–8515, CVE-2022–3573, CVE-2022–40005, CVE-2022–44149, CVE-2023–28771, as well as those impacting AVTECH IP cameras, LILIN DVRs, and Shenzhen TVT devices.

Threat actors on X are exploiting the news around Ross Ulbricht to direct unsuspecting users to a Telegram channel that tricks them into run PowerShell code that infects them with malware.

The attack, spotted by vx-underground, is a new variant of the “Click-Fix” tactic that has become very popular among threat actors to distribute malware over the past year.

However, instead of being fixes for common errors, this variant pretends to be a captcha or verification system that users must run to join the channel.

The RealHome theme and the Easy Real Estate plugins for WordPress are vulnerable to two critical severity flaws that allow unauthenticated users to gain administrative privileges.

Although the two flaws were discovered in September 2024 by Patchstack, and multiple attempts were made to contact the vendor (InspiryThemes), the researchers say they have not received a response.

Also, Patchstack says the vendor released three versions since September, but no security fixes to address the critical issues were introduced. Hence, the issues remain unfixed and exploitable.

A security researcher discovered a flaw in Cloudflare’s content delivery network (CDN), which could expose a person’s general location by simply sending them an image on platforms like Signal and Discord.

While the geo-locating capability of the attack is not precise enough for street-level tracking, it can provide enough data to infer what geographic region a person lives in and monitor their movements.

Daniel’s finding is particularly concerning for people who are highly concerned about their privacy, like journalists, activists, dissidents, and even cybercriminals.