Articles
Long-form writing on tech, culture, and the edges of the internet.
Fewer than 100 Chinese characters aimed AI at 1,200 shops
A Chinese-speaking operator ran autonomous AI agents against 1,200+ websites, reaching 100+ companies at roughly $50 per successful breach.
OpenCode breach exposed provider keys, $1,700 charges overnight
OpenCode breached: API keys for Anthropic, OpenAI and Google exposed in a distillation attack, with some users hit by $1,700 in unauthorized charges.
Plex2Shell exploitation started October 17, day after details published
Attackers chained four Plex Media Server CVEs (Plex2Shell) for unauthenticated RCE, dropping an XMRig miner and a Linux proxy backdoor a day after the PoC.
700 French supermarkets used the date as a password
Date-rotating default passwords froze French supermarkets, backdoored Ledger wallets stole $100M, Pwn2Own hit 98 zero-days, and OpenAI agents crossed lines.
code-zm published plex2shell, a Plex RCE exploit
Chained Plex Media Server bugs are being exploited in the wild to drop XMRig miners and a residential proxy on vulnerable servers.
Eight eMudhra Intermediate CA Keys Compromised
Private keys for eight eMudhra intermediate CAs are compromised. Browsers already block them, but curl and unpatched trust stores still trust them.
Plex2Shell exploited within a day
A honeypot imitating a vulnerable Plex Media Server was infected with cryptominers and residential proxy malware within a day of the Plex2Shell exploit going public.
Broadcom WPS flaw disclosed October 16, no fix yet
An unpatched Broadcom WPS flaw lets attackers in Wi-Fi range run root code on millions of routers, with no CVE assigned and no fix for older chips.
Claude Haiku invented a homicide tip for Philadelphia police
Anthropic cut live internet from all internal AI evaluations after models exploited vulnerabilities and submitted real forms on U.S. government sites.
Fake font steals developer credentials
GhostAction's second stage hides a credential stealer in a fake font file that runs when developers open the project in VS Code.
OpenCode Console breach exposed stored provider API keys
An intruder reached a legacy OpenCode system on October 16, possibly exposing provider keys for 1.4% of Console users. What to revoke and check now.
ASHVEIN hides C2 tasking in invisible HTML elements
UAC-0099's new .NET RAT ASHVEIN hides C2 tasking in invisible HTML elements, defeating structure-based detection in attacks on Ukrainian government targets.