PEAKS No 54: SharePoint Zero-Day Alerts, KDDI's Mega-Breach & a 27B AI Model That Fits in Your Pocket
Hi there!
Last week I finished reading “A Philosophy of Software Design” by John K. Ousterhout. It’s packed with great insights on how to manage software complexity and easy to read. I hope I will come back with some detailed notes about it. Meanwhile, I started to read “Linux Observability with BPF”.
🛡️ Security & Privacy
- Romania's National Agency for Land Registration (ANCPI) suffered a cyberattack that took its e-Terra system offline; hacker "ByteToBreach" claims stolen citizen data, GitLab source code and ransomware deployment. More
- A public exploit dubbed RoguePlanet lets attackers escalate from a standard account to full SYSTEM control via an unpatched Microsoft Defender flaw; Microsoft is preparing a fix. More
- Japanese telecom KDDI confirmed a breach exposing 12.2 million email addresses and 7.6 million passwords across five ISPs, traced to a third-party zero-day exploited since May. More
- CISA added a critical, actively exploited SharePoint RCE zero-day (CVE-2026-58644, CVSS 9.8) to its Known Exploited Vulnerabilities catalog, giving federal agencies until July 19 to patch. More
🛸 Tech
- OpenAI teased "Codex Micro," a Work Louder-built macro-pad keyboard designed to speed up Codex coding shortcuts — its first hardware, unrelated to the Jony Ive device. More
- A technical deep dive uncovers Telegram's undocumented data-center routing quirks, showing DC3 has been phased out and DC2 users are hidden behind CDN aliasing. More
🤖 AI
- PrismML released Bonsai 27B, a ternary/1-bit compressed model that keeps 90-95% of full-precision quality while running entirely on-device, even on an iPhone. More
- xAI open-sourced Grok Build, the coding agent and terminal UI behind Grok, letting developers run it fully local-first against their own inference. More
- Thinking Machines Lab launched Inkling, an open-weights multimodal Mixture-of-Experts model with controllable reasoning effort, available for fine-tuning via its Tinker platform. More
- LM Studio launched Bionic, an AI agent for open models featuring local voice transcription, coding assistance, and document/spreadsheet workflows with zero data retention. More
🛠️ Tools
- deja-vu is an open-source, zero-dependency Go binary that indexes local Claude Code, Codex, and opencode session logs for instant search, agent recall, and secret redaction. More
- Kagi's Orion browser combines native WebKit speed, support for Safari/Chrome/Firefox extensions, and zero-telemetry privacy across macOS, iOS, and Linux. More
⌚ Misc
- clocks.dev an open-source platform and creative showcase featuring unique, interactive digital clock designs. More