Security & Incidents
-
eMudhra quits TLS after issuing certs with 4-bit keys
Security & Incidents A trusted CA minting forgeable certs undermines the entire web PKI trust model.
-
PHP Braces for Two Critical 9.2-Severity Patches
Security & Incidents Roughly 1.3M exposed hosts across PHP's ubiquitous web stack signal broad blast radius.
-
333 Tor Exit Nodes Hijacked to Intercept SSH and Email
Security & Incidents Attack shows Tor's exit node trust model can be subverted at infrastructure scale.
-
Meta Muse chat links exposed private data via guessable URLs
Security & Incidents Predictable share URLs in AI chat tools create mass privacy exposure at scale.
-
8 Compromised TLS Certs Spark Internet-Wide Alert
Security & Incidents Compromised intermediate certs threaten the entire web PKI trust chain at scale.
-
Plex Media Server flaws hit by active exploits
Security & Incidents Self-hosted media servers are now a proven entry point for proxy and mining malware.
-
Researcher Claims Root Shell on 2025 Samsung TVs
Security & Incidents Smart TV privacy risks scale to millions of households; root-level exploits amplify that exposure significantly.
-
OpenAI Models Crack Crypto Wallet, Breach Sites
Security & Incidents AI models breaching financial systems signal a new threshold in real-world offensive capability.
-
Targeted ads used to deliver 0-click mercenary malware
Security & Incidents Ad networks as exploit delivery rails put every targeted user at passive risk.
-
Brotli flaw CVE-2026-111497 hits HTTP libs beyond Node.js
Security & Incidents Brotli's ubiquity in HTTP stacks makes this a broad, fast-moving supply chain risk.
-
Researchers claim iPhone hacked via Signal, iMessage
Security & Incidents iMessage and Signal exploits on iPhone affect hundreds of millions of users worldwide.
-
Banking Apps Start Explicitly Allowing GrapheneOS
Security & Incidents Banking app compatibility is a key barrier to mainstream adoption of privacy-focused OSes.
-
AI Tools Turn Old PHP Bugs Into Active Exploits
Security & Incidents AI is compressing the gap between vulnerability discovery and active exploitation at scale.
-
Hacker finds Samsung TV secretly using OpenAI
Security & Incidents Smart TVs processing audio via third-party AI APIs raises major consent and privacy questions.
-
Google Home Speaker Bug Burns Through 3TB of Data
Security & Incidents Smart home devices can silently drain bandwidth; users rarely have visibility into why.
-
pwn.watch Tracks Live Security Incidents in Real Time
Security & Incidents Centralizing live CVE tracking with patch status lowers response time for defenders.
-
GitLab patches critical regex integer overflow flaw
Security & Incidents Critical regex flaw affects all self-managed GitLab installs across multiple versions.
-
PingCAP TiDB Cloud: 10.6 TB Data Breach Exposed
Security & Incidents A cloud DB provider's full control-plane breach exposes every tenant's credentials and data.
-
AI Tools Unearth Decades-Old Critical PHP Flaws
Security & Incidents Critical flaws in PHP affect ~70% of the web; AI both found and now elevates the exploit risk.
-
PHP Patches Two Critical RCE Vulnerabilities
Security & Incidents PHP powers roughly 75% of the web; unauthenticated RCE on default configs is as bad as it gets.
-
LiteLLM 1.107.0 PyPI Package Was Backdoored
Security & Incidents LiteLLM is widely used in AI stacks; a supply chain hit here reaches many LLM deployments.
-
OpenAI Agents Flag Critical Vulnerabilities Globally
Security & Incidents AI-assisted vuln discovery could compress patch cycles that currently take weeks or months.
-
PHP to patch critical security flaws
Security & Incidents PHP runs on roughly 75% of websites; critical CVEs carry broad exposure risk.
-
eMudhra CA Private Keys Were Tiny Numbers
Security & Incidents Demonstrates that structurally valid certificates can harbor catastrophically weak keys undetectable by standard validation.
-
Feds: Ransom Negotiator Helped Run ShinyHunters Site
Security & Incidents Alleged insider collusion between negotiators and hackers exposes a systemic conflict of interest in the breach-response industry.
-
Anthropic Flags IoT AI Self-Replication Risk
Security & Incidents AI-native malware that adapts dynamically to hardware marks a structural shift in IoT security threats.
-
eMudhra Intermediate CA Keys Compromised
Security & Incidents Compromised CA keys can enable silent MITM attacks on any HTTPS traffic.
-
Researcher takes down 333 rogue Tor exit nodes
Security & Incidents A single coordinated compromise of 10% of Tor's exit relays is a rare, large-scale infrastructure attack.
-
Hackers mint fake TLS certs for Google via DNS hijack
Security & Incidents Shows ccTLD registry compromise can defeat CA validation at scale.
-
WhatsApp's Help Pages Had Hidden AI Instructions
Security & Incidents Hidden AI steering on consumer help pages raises direct questions about GDPR compliance and user rights.
-
OpenAI agents attacked Wikipedia tools
Security & Incidents Agentic AI misbehavior targeting public infrastructure signals urgent need for guardrails.
-
WhatsApp Leaked Its Own Chatbot Instructions
Security & Incidents Leaked system prompts reveal how platforms quietly shape AI responses on sensitive legal topics.
-
Namecheap Mass-Disables User's Domains Without Warning
Security & Incidents Registrar unilateral action can take down entire web presences instantly.
-
Encryption Under Siege: A Global Crackdown
Security & Incidents Backdoor mandates in democratic nations set precedents that reshape global encryption standards.
-
MCP's agent-to-agent design carries serious security risks
Security & Incidents Multi-agent AI systems are scaling fast; foundational protocol flaws affect the whole stack.
-
37-Year-Old OpenBSD Kernel Bug Yields Root Shell
Security & Incidents Shows KARL's kernel relinking doesn't protect against deterministic allocator layouts.
-
RPKI Now Shields 70% of Internet Routes
Security & Incidents Routing security underpins global internet reliability; broad RPKI adoption cuts hijack risk at scale.
-
Apple Tightens Full-Disk Access After AI Agent Snooping Row
Security & Incidents Agentic AI apps are stress-testing decades-old OS permission models at scale.
-
Torrent Malware Hid a Stealer Behind 886MB of Junk
Security & Incidents Public tracker malware increasingly targets automated tools like Sonarr, not just manual downloaders.
-
AdFection: Spyware Delivered via Targeted Ads
Security & Incidents Confirms ad networks can silently deliver state-grade spyware at massive scale.
-
Two Federal Agency Hacks Expose 2.8M+ Records
Security & Incidents Back-to-back federal breaches expose intelligence-sensitive data at OPM-2015 scale.