Archive
Everything we have published — 24 stories, newest first. Search by product, topic, or vulnerability identifier.
November 2026 · 24
- Android TV backdoor preloaded by manufacturer reinstalls itself after users remove it
- Crafted cookie lets attackers bypass Xen Orchestra login and take over virtualization hosts
- Underground eBPF rootkit tutorials show how Linux implants hide from routine checks
- Check-then-open race lets MCP filesystem server read outside allowed directories
- mcp-server-fetch SSRF guard classifies internal IPv6 site-local address as public
- Read-only Git status call runs attacker commands hidden in a repository's config
- Defender exclusion for all of Windows stays behind after Armorsteal is cleaned up
- SonicWall SSL-VPN flaw lets alternate credentials bypass SAML and MFA
- Flawed OpenSSH lets attackers log into password-locked accounts with long passwords
- FBI agent stole nearly $2.5 million in crypto from investigations he was handling
- Malicious Ruby gem steals credentials at install and may wipe files after a GitHub token is revoked
- Compromised Qubole credentials let attackers steal secrets and S3 data across customers' AWS accounts
- Turla's Cereal toolkit turned compromised Exchange servers into covert command posts
- Shared Aspire CLI temp files expose configuration to local users
- Beget wiper attack leaves half of VPS customers with unrecoverable data
- Paginated file-read tool lets attackers escape the project folder and read any server file
- Spoofed X-Forwarded-For header bypasses ezBookkeeping IP allowlist and forges audit logs
- Telepresence traffic manager lets any cluster pod steal intercepted services' environment secrets
- MCP filesystem directory-size listing follows symlinks and leaks outside-file sizes
- Elo AST injection lets attackers run code through generated JavaScript, Ruby, Python or SQL output
- Telegram uploads let any default sender overwrite praktor agent instruction files
- Malicious tool definitions let attackers run arbitrary code in banks despite Jinja sandbox fix
- Crafted PKCS#12 files pass node-forge password checks with any password
- Compromised credentials fed to ARTEX let agentic tools reach deep network access in hours