PEAKS No 54: SharePoint Zero-Day Alerts, KDDI's Mega-Breach & a 27B AI Model That Fits in Your Pocket

Hi there!

Last week I finished reading “A Philosophy of Software Design” by John K. Ousterhout. It’s packed with great insights on how to manage software complexity and easy to read. I hope I will come back with some detailed notes about it. Meanwhile, I started to read “Linux Observability with BPF”.

🛡️ Security & Privacy

  • Romania's National Agency for Land Registration (ANCPI) suffered a cyberattack that took its e-Terra system offline; hacker "ByteToBreach" claims stolen citizen data, GitLab source code and ransomware deployment. More
  • A public exploit dubbed RoguePlanet lets attackers escalate from a standard account to full SYSTEM control via an unpatched Microsoft Defender flaw; Microsoft is preparing a fix. More
  • Japanese telecom KDDI confirmed a breach exposing 12.2 million email addresses and 7.6 million passwords across five ISPs, traced to a third-party zero-day exploited since May. More
  • CISA added a critical, actively exploited SharePoint RCE zero-day (CVE-2026-58644, CVSS 9.8) to its Known Exploited Vulnerabilities catalog, giving federal agencies until July 19 to patch. More

🛸 Tech

  • OpenAI teased "Codex Micro," a Work Louder-built macro-pad keyboard designed to speed up Codex coding shortcuts — its first hardware, unrelated to the Jony Ive device. More
  • A technical deep dive uncovers Telegram's undocumented data-center routing quirks, showing DC3 has been phased out and DC2 users are hidden behind CDN aliasing. More

🤖 AI

  • PrismML released Bonsai 27B, a ternary/1-bit compressed model that keeps 90-95% of full-precision quality while running entirely on-device, even on an iPhone. More
  • xAI open-sourced Grok Build, the coding agent and terminal UI behind Grok, letting developers run it fully local-first against their own inference. More
  • Thinking Machines Lab launched Inkling, an open-weights multimodal Mixture-of-Experts model with controllable reasoning effort, available for fine-tuning via its Tinker platform. More
  • LM Studio launched Bionic, an AI agent for open models featuring local voice transcription, coding assistance, and document/spreadsheet workflows with zero data retention. More

🛠️ Tools

  • deja-vu is an open-source, zero-dependency Go binary that indexes local Claude Code, Codex, and opencode session logs for instant search, agent recall, and secret redaction. More
  • Kagi's Orion browser combines native WebKit speed, support for Safari/Chrome/Firefox extensions, and zero-telemetry privacy across macOS, iOS, and Linux. More

⌚ Misc

  • clocks.dev an open-source platform and creative showcase featuring unique, interactive digital clock designs. More