Tech · Culture · Fiction
Article Anthropic's Vulnerability Queue Keeps Growing
Anthropic's Glasswing data shows AI vulnerability discovery outpacing validation, disclosure, and remediation capacity.
APT29 poisoned a Ukrainian analytics script
APT29 injected device-fingerprinting code into Ukrainian analytics firm Plerdy's script to serve iOS and Android n-day exploit chains to unpatched phones.
GT10 exploits sshole to take over Linux systems
The *sshole flaw lets unauthenticated attackers SSH into Linux systems running OpenSSH with musl; Greynoise reports GT10 intrusions and an AI-generated backdoor.
SSHole exploited within hours of its November 5 fix
SSHole (CVE-2026-123158) lets an oversized password log into musl-based OpenSSH with PAM off; plus trojanized updaters and AI on both sides of attacks.
A February 2025 migration exposed DigiCert customer records online
A February 2025 server migration exposed a DigiCert internal system, and a self-registered account read archived customer data and identity documents.
Long Passwords Bypass Alpine SSH Authentication
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting Alpine Linux and other potentially vulnerable musl systems.
Long passwords unlock disabled accounts
The "*sshole" flaw lets oversized passwords log into *-disabled accounts on musl-based OpenSSH servers like Alpine under certain configurations. Fixed in 10.6p2.
The Wire — latest
All →- AI Pen-Test Tool Artex Misused for Rapid Cyberattacks
- Amazon unveils AI-powered Ring security drones, raises privacy concerns
- Anthropic's Glasswing Project Faces Criticism Over Low Fix Rates and High False Positives
- Apple Harbor app enables private local AI inference on Mac
- Arbitrary Code Execution Achieved on Meta Ray-Ban Smartglasses
- Checkmarx Names Kobi Sivilya as CISO and CIO
- Cisco BroadWorks XXE Now Actively Exploited in Attacks
- Cloud Range Launches Free OT Cyber Readiness Assessment Tool
- Democrats oppose FCC nominee, plan probes of Chairman Carr
- Extreme optimization: how 1980s game programmers squeezed every CPU cycle
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.