The Patching Friars' AlmanacA calendar of CVE saints

October 9

AdceptionHoly card for adception, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Ad Adception SOMNIUM IN SOMNIO
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed Adception, an Ad Within a Result Within an Ad

Patron of people who click the first sponsored result, "Copy" buttons, and everyone who pastes commands into a terminal without reading them.

Life

On 9 October 2026 Luke Jennings of Push Security described a Google ad for "claude mac" that showed bing.com as its domain. The click went through Bing's redirect, then through a compromised legitimate shop's page, to a fake download page where the "Copy" button put on the clipboard a different command from the one on screen, which fetched and ran a malicious script. A search engine inside an ad inside another search engine: the name winks at Inception.

Prayer

O Blessed Adception, who hides an ad in a result and a command in a button, let us read what we paste. Amen.

How to celebrate

Celebrated by downloading software from the vendor's site typed by hand, and pasting into the terminal only what you've read to the end.

Paste without reading, run without knowing.

Technical record

Disclosed on
October 9 2026
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: pushsecurity.com

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.