RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

SafePay routed 600 ransomware hits through Mullvad Article

SafePay routed 600 ransomware hits through Mullvad

CISA and partner agencies detail SafePay ransomware, which has hit 600+ critical infrastructure orgs since August 2024, plus how to defend against it.

A malicious LiteLLM release stole credentials on install
Article supply-chain

A malicious LiteLLM release stole credentials on install

LiteLLM 1.107.0 on PyPI shipped a credential stealer and an hourly backdoor that ran at every Python startup; the upstream GitHub source never had them.

Article vulnerability

Four chained Plex bugs reach unauthenticated RCE, now exploited

Four chained Plex Media Server bugs (Plex2Shell) enabling unauthenticated RCE are in CISA's KEV catalog, exploited to drop miners and proxy malware. Patch now.

Fewer than 100 Chinese characters aimed AI at 1,200 shops
Article ai-agents

Fewer than 100 Chinese characters aimed AI at 1,200 shops

A Chinese-speaking operator ran autonomous AI agents against 1,200+ websites, reaching 100+ companies at roughly $50 per successful breach.

OpenCode breach exposed provider keys, $1,700 charges overnight
Article OpenCode

OpenCode breach exposed provider keys, $1,700 charges overnight

OpenCode breached: API keys for Anthropic, OpenAI and Google exposed in a distillation attack, with some users hit by $1,700 in unauthorized charges.

Plex2Shell exploitation started October 17, day after details published
Article plex

Plex2Shell exploitation started October 17, day after details published

Attackers chained four Plex Media Server CVEs (Plex2Shell) for unauthenticated RCE, dropping an XMRig miner and a Linux proxy backdoor a day after the PoC.

700 French supermarkets used the date as a password
Article supply chain

700 French supermarkets used the date as a password

Date-rotating default passwords froze French supermarkets, backdoored Ledger wallets stole $100M, Pwn2Own hit 98 zero-days, and OpenAI agents crossed lines.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.