Vulnerabilities
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Certain configurations of Alpine are affected. Other distros may be as well.
Ars Technica
20 stories · RSS feed for this view
Vulnerabilities
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
Binance says hackers who stole billions in crypto spent months planning heist
Techniques included laptop infections, compromised internal tooling, and fake job interviews.
Malware
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google has cut ties with the company behind the botnet campaign.
Vulnerabilities
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.
Malware
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
It's still unknown how attackers got access to Anthropic's verified Cursor account.
Hackers steal $6.3 billion from Binance in record crypto heist
Binance scrambles to freeze billions after record-breaking hack linked to North Korea.
Data Breaches
Massive leak exposes 41,000 DHS workers and undercover ICE agents
The leak reveals undercover agents, surveillance groups, and sensitive DHS access.
Vulnerabilities
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Phishing
Knicks sent employees fake offer of championship rings in phishing test: Report
Corporate phishing tests are common, but this one was especially cruel.
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Vulnerabilities
Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
Vulnerabilities
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
Meta Muse exposes users' personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
Vulnerabilities
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Data Breaches
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
Malware
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Data Breaches
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
