Tag
An unauthenticated IPv4 TCP race flaw affects kernels back to 4.4; Debian has fixes, Ubuntu LTS kernels are still pending, and turning off MPTCP does not help.
audiotale.net team7 min read
A tampered Anthropic.claude-code 2.1.313 tried to plant an SSH backdoor for about 11 hours on 29 October. Here is how to check, clean up and what is still unknown.
audiotale.net team8 min read
Binance estimates a $6.3 billion security incident, blames a compromised DevOps laptop and promises to cover losses; analysts point to North Korea.
audiotale.net team11 min read
Drupal rates SA-CONTRIB-2026-254 highly critical and says it is exploited in the wild; here is who is affected, how to update and what to audit.
audiotale.net team6 min read
Non-admin users could not connect by Remote Desktop to Windows 11 PCs with Administrator protection on; Microsoft marked the bug resolved on 28 October and lists the workaround for older builds.
audiotale.net team7 min read
Pluto Security found 31 fake Qwen2 test models that mine crypto and open backdoors on GPU servers; here is how to check a host.
audiotale.net team6 min read
CrowdStrike says a China-linked group ran the open-source ARTEX framework with DeepSeek against more than 200 targets and confirmed nine intrusions.
audiotale.net team6 min read
Talos says UAT-11473 used the patched Catalyst SD-WAN authentication bypass to plant malware inside vdaemon and harvest control-plane and data-plane key material.
audiotale.net team6 min read
Socket links 319 Chrome extensions with about 13.4 million reported installs to search hijacking that routes every query through operator proxies; here is how to check your browser.
audiotale.net team7 min read
CISA says the Linux kernel bug Fragnesia is exploited together with the PHP2Shell flaws; Dream reports 25 servers rooted. Here is who is affected and how to patch.
audiotale.net team8 min read
Radware scanned 145 million GitHub items; The Register reports a one-hour campaign that hid shell commands in 83 issues and comments across 61 public repositories.
audiotale.net team6 min read
Cisco says attackers are already exploiting an unauthenticated denial-of-service bug in Secure Firewall ASA and FTD VPNs that use secondary authentication; here is how to check and what to upgrade to.
audiotale.net team6 min read