Security
SSHole: Attackers Gained Root Access on an Alpine Honeypot
Less than nine hours after the CVE-2026-123158 vulnerability was published, Previdian detected the first exploitation attempt. The firm confirmed that...
Security
Security
Claude Dispatch Let Extensions Run Code on Another Computer
A browser extension with access to claude.ai could get Claude Desktop to execute code on the linked computer, even if that computer was different from...
Security
Claude Code: 1,122 public files exposed secrets on GitHub
A Claude Code configuration file appeared in 1,122 public copies on GitHub with at least one password, token, or key, according to Apiiro’s investig...
Security
GPT-6 Cyber finds 948 exploits in the Linux kernel
948 working exploits for Linux kernel vulnerabilities and 81 previously unknown critical flaws in Firefox: these are the results OpenAI is presenting ...
Security
Chrome 157 fixes 213 flaws, seven of them critical
213 vulnerabilities fixed, seven of them critical: that is Chrome 157’s security tally, for the new stable version on Windows, macOS, and Linux. The...
Security
An .npmrc token hid malware in Tailwind plugins for npm
A Next.js project sent to a freelancer by a supposed Fiverr client included an npm token that allowed a private dependency invisible in the public reg...
Security
OpenSSH 10.6p2 closes access with passwords up to 1,024 bytes long
A password string between 257 and 1,024 bytes was enough to log in over SSH to certain Linux accounts configured without a password. Disclosed on Nove...
Security
CVE-2026-109518: APT allows code execution as root
An attacker who can modify traffic between APT and the package server can replace a verified download with their own package and execute its code as r...
Security
948 Linux Privilege-Escalation Exploits: OpenAI’s Test and Its Limits
948 local privilege-escalation exploits capable of gaining root: that is the result OpenAI attributes to a 30-hour run of its new automated pipeline o...
Security
CVE-2026-119977 Exposes WordPress During Core Updates
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed the exploitation of a WordPress core vulnerability and added it to its Know...