Reposted by gunstick
For everyone whose answer to everything going on in America right now is a midterm election, do you think the problem with the Nazis was that not enough people voted?
gunstick
@gunstick.mastodon.opencloud.lu.ap.brid.gy
25 followers 1 following 751 posts
hacking, rollercoasters, yoga, massage, retrocomputing, chiptunes, AtariST, linux, circus, astronomy, sarcasm. Anti Fascist. member Unlimited Matricks (U.L.M […] 🌉 bridged from ⁂ mastodon.opencloud.lu/@gunstick, follow @ap.brid.gy to interact
![A screenshot of a social media thread from October 3, 2026.
The first post is from Guillermo Rauch (@rauchg). He states that they have confirmed a KVM 0-day vulnerability through the Vercel Sandbox bounty program, noting that it affects the industry standard solution for Linux virtualization. He mentions that 2026 is wild and thanks Paulos and other researchers for helping create a secure sandbox for agents, adding that a full write-up is coming.
Below this is a reply from Paulos Yibelo (@PaulosYibelo), who says, "Full VM escape zeroday (guest>host root in industry standard hypervisors)! More soon".
Included in Paulos's reply is a screenshot of a bounty award notification. It reads: "Vercel Sandbox rewarded paulos__ with a $50,000 bounty. 5 hours ago. Thank you for the report. We are awarding a $50,000 USD bounty. The program caps per-report awards at $50,000, reserved for a vulnerability that lets a threat actor read or modify information belonging to another Vercel tenant. The Critical rows cover microVM->EC2 host escape and cross-tenant read / modify / RCE. This report's root cause (guest-controlled [redacted text]) delivers exactly that class."
The timestamp at the bottom of the image is Oct 3, 2026, 3:12 PM UTC.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:twerjlabpqmvieyx3roydios/bafkreigc4zuc55phtxg4vrgcwq6kdvnzi5yxchzwtjx4nnwotepmadyrbi)
