Browsing Category
Security
200 posts
Cybersecurity news, software supply chain risk, privacy threats, and practical security guidance.
Proton Maps 170,000+ Flock Cameras. Here’s What the Data Shows and Misses
Proton’s searchable Flock map covers more than 170,000 cameras and 130,000 other devices. Here is how to use it, what the readers collect and why the December 2025 snapshot needs verification.
Salesforce Will Make External AI Agents Register and Meter Their API Calls
Salesforce is targeting November for Agentic Identity, requiring external AI agents to use dedicated credentials while future MCP and API calls consume Flex Credits.
HTTP2Shell Escaped Node.js: How to Find Every Vulnerable Brotli Copy
CVE-2026-111497 now reaches Node.js, Python, .NET, Java and Linux packages. Find bundled Brotli decoders, patch the right layer and close unsafe decompression paths.
CISA Gives Nextcloud Collabora Admins Until Oct. 26 to Patch an Exploited RCE
CISA added an exploited Collabora Built-in CODE flaw to KEV. Check the affected Nextcloud app, patch it, and hunt for web shells before October 26.
GitLab CVSS 10 RCE Spans 12 Years of Releases: Patch and Hunt Now
CVE-2026-110264 lets unauthenticated attackers run code on self-managed GitLab servers. Check fixed versions, upgrade traps and the evidence defenders should preserve.
PHP2Shell Is Patched, but a Third PHP RCE Edge Case Remains
PHP’s emergency updates fix the two critical PHP2Shell flaws, but CVE-2026-115560 still needs a temporary session upload setting change. Here is how to verify every web runtime.
eMudhra TLS Certificates Could Break in Chrome on Oct. 27: What to Check
Chrome will remove eMudhra’s emSign ECC Root CA - G3 on October 27. Check certificate chains, force ACME reissuance and verify the replacement path before sites break.
LiteLLM 1.107.0 Ran Malware on Python Startup: How to Recover
LiteLLM 1.107.0 poisoned official PyPI and container releases. Check the exact exposure window, rebuild safely and rotate every credential at risk.
Cairn AI Agents Breached 100+ Sites: What Defenders Should Check
NorForge exposed autonomous Cairn intrusion campaigns that attempted 1,200 sites and compromised more than 100. Here is how the agents worked and what defenders should audit.
Microsoft Guardian Agents Can Strip Risky AI Tools of Write Access
Microsoft's Guardian Agents can reduce permissions, require approval or stop risky AI tools mid-task. Here is what the private preview covers and misses.