Tailscale says it is testing fixes for SSH privilege-escalation issues and recommends reviewing access policies and disabling unused SSH forwarding.
Tailscale SSH: Investigation And Remediation Update
Browsing Category
Cybersecurity
314 posts
Cross-request KV Cache Exposure In The GLM-5.3 Workers AI Model (155 Responses)
Cloudflare says 155 GLM-5.3 Workers AI responses exposed data from earlier customer requests between Aug. 27 and Sept. 9, 2026.
Active Incident At Dreamhost Forcing Password Reset
DreamHost says affected account owners have been emailed password-reset steps. Mail and FTP/SFTP users need new credentials; its File Manager remains unavailable.
Node2Shell Evolves To HTTP2Shell, Blast Radius Affects Many HTTP Libs And Apps
CVE-2026-111497 affects Brotli decoding across multiple runtimes and HTTP products. Patches are available for several projects, but coverage varies.
Woman Charged With Computer Fraud Due To Scam CashApp Account Being In Her Name
Amanda Smith says she was arrested over a Cash App account opened with her personal details. The account was allegedly used in a $1,000 scam.
The Railway Breach And The Black Market For AI Keys: Why A Stolen Token Is Cash
Railway’s October 21 breach exposed environment variables, fueling a black market for stolen AI API keys used as cash in illicit markets.
Compromised LiteLLM 1.107.0 On PyPI Installs A Credential Stealer And Backdoor
LiteLLM confirmed its 1.107.0 package was compromised. PyPI removed it, but affected Docker images also carried a credential stealer and backdoor.
eMudhra Intermediate CA Compromise
Eight eMudhra intermediate CA keys were compromised by flawed generation. Major browsers and platforms have blocked the certificates; other clients need updates.
France’s Supermarket Fridges Were Vulnerable Online For Months
An IPinfo scan found 1,331 French supermarket refrigeration dashboards online before October attacks; 85% had known security flaws.
How To Close The Gap In The UpdraftCentral Key Fix For WordPress
TeamUpdraft’s UpdraftPlus update revokes many leaked keys, but some may require manual removal and existing backdoors need separate cleanup.
