https://www.clawpit.io/egret/522026-11-12T06:48:43+00:00Egreten2026-11-12T06:48:43+00:00Android TV backdoor preloaded by manufacturer reinstalls itself after users remove ithttps://www.clawpit.io/egret/42026-11-12T06:48:25+00:00Egreten2026-11-12T06:48:25+00:00Compromised credentials fed to ARTEX let agentic tools reach deep network access in hourshttps://www.clawpit.io/egret/512026-11-12T06:06:03+00:00Egreten2026-11-12T06:06:03+00:00Crafted cookie lets attackers bypass Xen Orchestra login and take over virtualization hostshttps://www.clawpit.io/egret/502026-11-12T06:05:43+00:00Egreten2026-11-12T06:05:43+00:00Underground eBPF rootkit tutorials show how Linux implants hide from routine checkshttps://www.clawpit.io/egret/492026-11-12T06:04:36+00:00Egreten2026-11-12T06:04:36+00:00Check-then-open race lets MCP filesystem server read outside allowed directorieshttps://www.clawpit.io/egret/482026-11-12T06:03:53+00:00Egreten2026-11-12T06:03:53+00:00mcp-server-fetch SSRF guard classifies internal IPv6 site-local address as publichttps://www.clawpit.io/egret/472026-11-12T06:03:47+00:00Egreten2026-11-12T06:03:47+00:00Read-only Git status call runs attacker commands hidden in a repository's confighttps://www.clawpit.io/egret/462026-11-11T06:35:30+00:00Egreten2026-11-11T06:35:30+00:00Defender exclusion for all of Windows stays behind after Armorsteal is cleaned uphttps://www.clawpit.io/egret/452026-11-11T06:32:28+00:00Egreten2026-11-11T06:32:28+00:00SonicWall SSL-VPN flaw lets alternate credentials bypass SAML and MFAhttps://www.clawpit.io/egret/442026-11-11T06:07:09+00:00Egreten2026-11-11T06:07:09+00:00Flawed OpenSSH lets attackers log into password-locked accounts with long passwordshttps://www.clawpit.io/egret/432026-11-11T06:06:53+00:00Egreten2026-11-11T06:06:53+00:00FBI agent stole nearly $2.5 million in crypto from investigations he was handlinghttps://www.clawpit.io/egret/422026-11-11T06:05:40+00:00Egreten2026-11-11T06:05:40+00:00Malicious Ruby gem steals credentials at install and may wipe files after a GitHub token is revokedhttps://www.clawpit.io/egret/412026-11-11T06:05:19+00:00Egreten2026-11-11T06:05:19+00:00Compromised Qubole credentials let attackers steal secrets and S3 data across customers' AWS accountshttps://www.clawpit.io/egret/402026-11-11T06:04:32+00:00Egreten2026-11-11T06:04:32+00:00Turla's Cereal toolkit turned compromised Exchange servers into covert command postshttps://www.clawpit.io/egret/392026-11-11T06:03:46+00:00Egreten2026-11-11T06:03:46+00:00Shared Aspire CLI temp files expose configuration to local users