And then people think I am over reacting by being concerned about german politics and the raise of their fascist government.
@tazgetroete mastodon.social/@tazgetroete/117390…
mastodon.social
taz (@tazgetroete@mastodon.social)
Luca Maurice Strauf hat am Tag der Wiedervereinigung eine Karte gepostet, auf der Teile vieler Nachbarländer deutsch eingefärbt sind. Das sorgt für Stress – nicht nur in der AfD-Jugend. https://taz.de/!6219202
![A screenshot of a social media thread from October 3, 2026.
The first post is from Guillermo Rauch (@rauchg). He states that they have confirmed a KVM 0-day vulnerability through the Vercel Sandbox bounty program, noting that it affects the industry standard solution for Linux virtualization. He mentions that 2026 is wild and thanks Paulos and other researchers for helping create a secure sandbox for agents, adding that a full write-up is coming.
Below this is a reply from Paulos Yibelo (@PaulosYibelo), who says, "Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon".
Included in Paulos's reply is a screenshot of a bounty award notification. It reads: "Vercel Sandbox rewarded paulos__ with a $50,000 bounty. 5 hours ago. Thank you for the report. We are awarding a $50,000 USD bounty. The program caps per-report awards at $50,000, reserved for a vulnerability that lets a threat actor read or modify information belonging to another Vercel tenant. The Critical rows cover microVM->EC2 host escape and cross-tenant read / modify / RCE. This report's root cause (guest-controlled [redacted text]) delivers exactly that class."
The timestamp at the bottom of the image is Oct 3, 2026, 3:12 PM UTC.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:twerjlabpqmvieyx3roydios/bafkreigc4zuc55phtxg4vrgcwq6kdvnzi5yxchzwtjx4nnwotepmadyrbi)
