Blog

Hackers took 300 GB from the AfD's provider in two visits Byte

Hacked Tor exits intercepted SSH logins and planted Ebury backdoors Byte

CVE-2026-109618 - PHP2Shell a week on: crashes on the web, root on PAN-OS Vulnerability

Cursor's marketplace served a backdoored Claude Code extension Byte

CVE-2026-109618 - PHP RCE CVEs leaked before the patch was out Vulnerability

eMudhra's CA keys fit in a byte, and curl and Node still trusted them Byte

CVE-2026-110264 - Unauthenticated GitLab RCE via a crafted .org file Vulnerability

CVE-2026-88771 - Exploited NetScaler pre-auth command injection Vulnerability

CVE-2026-94127 - F5 BIG-IP APM OAuth heap overflow to unauthenticated RCE Vulnerability

Two Kinds of Bot 2 min read

Ukraine struck three of Yandex’s five data centres from 8 October. Within days a Cloudflare chart was circulating as proof that Russian bot networks had gone dark, and President Zelensky …

CVE-2026-88779 - NetScaler SAML DoS, followed by a SAML RCE Vulnerability

CVE-2026-107181 - Telegram Desktop one-click account takeover Vulnerability

Swarm traces: how OpenAI agents hacked Hugging Face Byte

Early rogue AI agent activity and attempts to hack found on urlquery.net Byte

Insights from table-top exercises in Europe on AI safety and cyber misuse Byte

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers Byte

Apache Log4j2 Java Deserialization Filter Bypass Vulnerability

VMs Won't Contain Cyber-Capable Agents Byte

Data Science for Detection Engineering Maintenance Byte

The Patch Window Is Collapsing Byte

Flare names the Australian operator behind TeamPCP Byte

Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP Byte

SANS VulnOps Field Guide for when tickets can't keep up Byte

OpenAI agents carried out an undisclosed cyber-attack on RubyGems Byte

Discovery of a new OpenAI agent message board Byte