Security
Five Azure API Connections Flaws Crossed Tenant Boundaries
Five critical vulnerabilities in Azure API Connections allowed a Binary Security researcher to use other customers’ connections to act against their...
Security
Security
CISA Confirms Active Attacks Against GitLab Over CVE-2026-97229 Flaw
Attackers are already exploiting CVE-2026-97229, a critical vulnerability that can allow code execution on GitLab servers. The U.S. Cybersecurity and ...
Security
Binance Links Record-Breaking Theft to Compromised DevOps Laptop
A compromised laptop belonging to a DevOps engineer may have opened the way to siphoning $6.36 billion from Binance wallets across ten blockchain netw...
Security
Filter Traffic to the Router with nftables and Limit ICMP
A flood targeting the router’s own address can force its CPU to process traffic that should not reach control and management services. On Linux, an ...
Security
Cloudflare mitigated 18.2 million DDoS attacks in the third quarter
Cloudflare mitigated 18.2 million network DDoS attacks between July and September 2026: about 8,226 per hour, or one every 0.44 seconds. During the sa...
Security
CVE-2026-98432 Opens the Door to Remote Root Access on Linux Servers
An exploit developed by Anthropic researchers managed to remotely execute commands as root on a Linux server with an MPTCP listener. The vulnerability...
Security
Wordfence Blocks 62,969 Attempts Targeting a WordPress Vulnerability
Wordfence blocked 62,969 attempts in 24 hours targeting a remote code execution vulnerability in WordPress Core, after the patch was released on Octob...
Security
A Claude Code extension in Cursor installed an SSH backdoor
A malicious version of Claude Code, identified as 2.1.313, was available in Cursor’s VS Code extension marketplace on October 29. The package attemp...
Security
Binance Loses $6.36 Billion in Record Crypto Heist
An attacker stole approximately $6.36 billion from Binance wallets across ten networks in the largest cryptocurrency theft on record. The activity beg...
Security
Protect an MCP Agent with Least-Privilege Permissions and a Local Gateway
An agent that can read private data, process untrusted content, and communicate externally combines the three capabilities Simon Willison calls the �...