TeamViewer Bug Lets Remote Hosts Crash or Run Code Against Technicians
A recently disclosed vulnerability in TeamViewer can turn…
Updated 4 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Anthropic Exploit Reveals Critical Linux Kernel Flaw (CVE-2026-98432) That Grants Remote Root on MPTCP Servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability—tracked as CVE-2026-98432—that can allow unauthenticated attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw is a use-after-free in the kernel's IPv4 TCP networking code and has been scored 9.8/10 by the Linux kernel CVE team, although some vendors assess exploitation complexity differently. What the flaw is CVE-2026-98432 stems from a…
Hardcoded Database Password in Applebee’s App Exposed Customer Records
Applebee’s patched a security flaw after a researcher found a database password embedded inside the chain’s Android app, a lapse that allowed access to customers’ personal information. TechCrunch held the story until the issue was confirmed fixed. The exposed credential, discovered in the app’s source code, could be extracted by anyone with the app and used to access the company’s customer database. Discovery and verification Robert Wiggins, a U.K.-based cybersecurity…
Active exploitation in Drupal Commerce Core (CVE-2026-118539): urgent patching for online stores
Drupal has issued a public advisory warning that a critical flaw in the Commerce Core module is being actively exploited, placing online stores at risk of unauthorized changes to orders and other store data. Published on October 28, 2026, the advisory identifies missing access checks in routes and entity fields that could let attackers reach functions or modify data they should not control. Drupal assigned the issue a high risk…
Aur0ra’s AI-Driven Leap: How Cursor Agents Helped Hackers Reach Domain Admin
Ransomware operators tied to the Aur0ra (Aur0ra/Aur0ra) family used AI coding agents to shorten the path from stolen credentials to full domain administrator control, then collected data and prepared ransomware deployment. Sophos researchers traced the activity to a group tracked as GOLD OGRE, which combined human-provided access and goals with Cursor AI agents that automated many intrusion steps. The result: lower skill required to run complex intrusions and faster, more…
Z2RAM’s Long Game: Pat Gelsinger Backs Nagare Labs’ Bid to Rethink Memory for AI
The global memory crunch has become a persistent drag on consumer electronics and data-center economics alike. Prices are high, supply is tight, and the industry’s three big players—Samsung, SK hynix, and Micron—have signaled that relief could be years away. Into that squeeze steps a small startup and a familiar industry figure: Nagare Labs, spun out of Georgia Tech and co-founded by professors Suman Datta and Shimeng Yu, has emerged with…
Panic on the Management Plane: PHP2Shell Exploitation Hits PAN-OS Interfaces
Palo Alto Networks has confirmed active exploitation of PHP2Shell vulnerabilities against PAN-OS management interfaces that were exposed to the internet. In an October 29, 2026 update, Unit 42 verified that attackers combined the PHP flaws with a Linux kernel vulnerability to escalate from remote code execution to full root access on affected systems. The vendor says the attack surface was limited to publicly reachable management HTTPS interfaces and the XML…
Active exploitation of critical GitLab regex flaw forces urgent patching
Attackers have begun exploiting a maximum-severity vulnerability in GitLab that can allow remote code execution, prompting immediate warnings from GitLab and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-97229, stems from an integer overflow in GitLab's CI/CD Regular Expression Compiler and can be triggered by a malicious regular expression in a pipeline configuration. The flaw at a glance CVE-2026-97229 is an integer overflow weakness in…
North Korea’s TraderTraitor Pulls Off Crypto’s Biggest Heist: Inside the $6.36B Binance Breach
On the evening of October 29, 2026, wallets tied to Binance began sending large volumes of crypto across ten blockchains in a tightly timed operation. TRM Labs traced roughly USD 6.36 billion in outflows and attributes the attack to North Korea’s TraderTraitor unit. Stablecoin issuers and network councils froze about USD 2.7 billion, but the attacker still controls roughly USD 2.4 billion in assets that remain beyond issuers’ reach. This…
How a Tampered Claude Code Extension Can Give Attackers Persistent SSH Access
A recent analysis by OpenSourceMalware found a tampered Claude Code extension on Open VSX that can give attackers persistent remote access to developer systems. The altered package, identified as anthropic.claude-code version 2.1.313, injects a short JavaScript loader that runs during normal extension activity and implements an SSH backdoor, reverse tunneling, and cross-platform persistence mechanisms. The sample analyzed targeted macOS on Apple Silicon, though the injected code contains branches for Linux…
Polymarket’s Third-Party Breach: How Malicious Scripts Drained Wallets and What Traders Should Do Next
Polymarket suffered a security incident on October 29, 2026, when a compromised third‑party provider exposed international users to wallet theft. Traders reported missing funds, unexpected withdrawals, and positions being closed without permission. The company temporarily halted trading, said it fixed the issue, promised reimbursements for affected customers, and later resumed trading. What happened Hudson Rock’s technical investigation and subsequent reporting tied the incident to malicious JavaScript delivered through an address…
AWS Powers Amazon’s Record Margins While AI Spending Drains Cash Flow
Amazon’s third-quarter 2026 results painted a study in contrasts: robust top-line growth and record operating margins driven largely by AWS, paired with mounting cash-flow pressure as heavy AI investments and capital expenditures weigh on liquidity. Revenue rose to $201.9 billion, operating income jumped sharply, yet free cash flow turned negative for the trailing year—signs that Amazon is balancing a profitable core with aggressive, expensive bets on AI infrastructure. A quarter…
OpenAI doubles ChatGPT Pro usage limits after subscriber backlash
OpenAI reversed a planned reduction in usage allowances and instead announced it is doubling usage limits for several ChatGPT Pro tiers. The company said the change takes effect immediately and was prompted by customer feedback after earlier plans to cut included usage for some subscribers. What OpenAI announced Tibo, the face of ChatGPT and Codex on X, confirmed that OpenAI is doubling usage limits for all Pro 100, Pro 200,…