EGRET ARTICLES

Latest articles

AI agents, malware and platform security.
Clear findings. Sources you can check.

Malware12 Nov 20261 min read

Android TV backdoor preloaded by manufacturer reinstalls itself after users remove it

Videostrong preloaded an Android TV backdoor in device firmware that automatically reinstalls itself after users uninstall it, researchers at Google Threat Intelligence Group say. The persistent software enrolled more than 1.3…

Read the story Source: Google Threat Intelligence

Vulnerabilities12 Nov 20261 min read

Underground eBPF rootkit tutorials show how Linux implants hide from routine checks

Flare researchers found underground forum posts sharing eBPF rootkit code that hides running processes and activates when it receives a specially crafted packet, slipping past checks that look for loaded kernel modules…

BleepingComputer

AI & agents12 Nov 20261 min read

Check-then-open race lets MCP filesystem server read outside allowed directories

A local attacker can make the MCP filesystem server leak files outside its allowed directories: it checks a path, then reopens it by name, allowing a directory-to-symlink swap between the check and the open, according to advisory…

MCP server advisories

AI & agents12 Nov 20261 min read

mcp-server-fetch SSRF guard classifies internal IPv6 site-local address as public

The address guard in mcp-server-fetch wrongly classifies an internal IPv6 site-local address as public, letting a fetch bypass the SSRF check meant to refuse non-public destinations, researchers at ShieldPi report.

MCP server advisories

AI & agents12 Nov 20261 min read

Read-only Git status call runs attacker commands hidden in a repository's config

A read-only request for Git repository status can run a program chosen by the repository itself. The advisory reports that mcp-server-git lets an untrusted repository's own .git/config execute arbitrary code through…

MCP server advisories

Malware11 Nov 20261 min read

Defender exclusion for all of Windows stays behind after Armorsteal is cleaned up

Seqrite Labs reports that Armorsteal can leave a Windows Defender exclusion covering all of C:\Windows even after the malware kit itself has been cleaned up, so removal may not undo the exposure.

Seqrite Labs

Privacy & OSINT11 Nov 20261 min read

SonicWall SSL-VPN flaw lets alternate credentials bypass SAML and MFA

SonicWall says attackers can bypass SAML authentication—and any SAML-enforced MFA—on SSL-VPN by logging in with valid credentials for another authentication method; researcher Ryan Harris reported the flaw.

BleepingComputer

Vulnerabilities11 Nov 20261 min read

Flawed OpenSSH lets attackers log into password-locked accounts with long passwords

An OpenSSH flaw called SSHole lets attackers log into password-locked accounts—those whose /etc/shadow field is literally an asterisk—by sending an oversized password, and can lead to root access where the account has…

BleepingComputer

Vulnerabilities11 Nov 20261 min read

FBI agent stole nearly $2.5 million in crypto from investigations he was handling

A former FBI agent pleaded guilty to stealing nearly $2.5 million in cryptocurrency from fraud victims and nation-state hackers in investigations he was handling, according to Justice Department court documents cited by…

BleepingComputer

Vulnerabilities11 Nov 20261 min read

Malicious Ruby gem steals credentials at install and may wipe files after a GitHub token is revoked

Installing a seemingly small Ruby string-helper gem runs a credential-stealing worm during setup, Socket Research reports; a separate token monitor can delete home files only after a stolen GitHub token is revoked.

Socket Research

FROM THE ORIGINAL PUBLISHERS

On our radar

All sources ↗

Original advisories and research, awaiting Egret editorial review.

BleepingComputerNov 10, 2026

Latest articles

Android TV backdoor preloaded by manufacturer reinstalls itself after users remove it

Underground eBPF rootkit tutorials show how Linux implants hide from routine checks

Check-then-open race lets MCP filesystem server read outside allowed directories

mcp-server-fetch SSRF guard classifies internal IPv6 site-local address as public

Read-only Git status call runs attacker commands hidden in a repository's config

Defender exclusion for all of Windows stays behind after Armorsteal is cleaned up

SonicWall SSL-VPN flaw lets alternate credentials bypass SAML and MFA

Flawed OpenSSH lets attackers log into password-locked accounts with long passwords

FBI agent stole nearly $2.5 million in crypto from investigations he was handling

Malicious Ruby gem steals credentials at install and may wipe files after a GitHub token is revoked

On our radar

Google patches eighth Chrome zero-day exploited in attacks this year

iOS Sandbox Escape Is Public, and Apple Hasn't Confirmed a Fix

Desktop and IoT threat statistics for Q3 2026

Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools