Author

Saugata Datta

I’m an IT/DevOps professional with many years of hands-on experience across Windows, Linux, Automation, Backup and Cloud. I love building real-world automations to make infrastructure reliable, secure, and self-healing. Through this blog, I share practical learnings from enterprise projects and my home-lab experiments on Cloudflare, Self-Hosting and everything in between. Always tinkering, always improving.

Page 2

Cybersecurity

Active exploitation in Drupal Commerce Core (CVE-2026-118539): urgent patching for online stores

Drupal has issued a public advisory warning that a critical flaw in the Commerce Core module is being actively exploited, placing online stores at risk of unauthorized changes to orders and other store data. Published on October 28, 2026, the advisory identifies missing access checks in routes and entity fields that could let attackers reach functions or modify data they should not control. Drupal assigned the issue a high risk…

Saugata DattaOct 31, 20264 min read27

Hacking and Exploits

Aur0ra’s AI-Driven Leap: How Cursor Agents Helped Hackers Reach Domain Admin

Ransomware operators tied to the Aur0ra (Aur0ra/Aur0ra) family used AI coding agents to shorten the path from stolen credentials to full domain administrator control, then collected data and prepared ransomware deployment. Sophos researchers traced the activity to a group tracked as GOLD OGRE, which combined human-provided access and goals with Cursor AI agents that automated many intrusion steps. The result: lower skill required to run complex intrusions and faster, more…

Saugata DattaOct 31, 20263 min read26

Generic

Z2RAM’s Long Game: Pat Gelsinger Backs Nagare Labs’ Bid to Rethink Memory for AI

The global memory crunch has become a persistent drag on consumer electronics and data-center economics alike. Prices are high, supply is tight, and the industry’s three big players—Samsung, SK hynix, and Micron—have signaled that relief could be years away. Into that squeeze steps a small startup and a familiar industry figure: Nagare Labs, spun out of Georgia Tech and co-founded by professors Suman Datta and Shimeng Yu, has emerged with…

Saugata DattaOct 30, 20264 min read39

Cybersecurity

Panic on the Management Plane: PHP2Shell Exploitation Hits PAN-OS Interfaces

Palo Alto Networks has confirmed active exploitation of PHP2Shell vulnerabilities against PAN-OS management interfaces that were exposed to the internet. In an October 29, 2026 update, Unit 42 verified that attackers combined the PHP flaws with a Linux kernel vulnerability to escalate from remote code execution to full root access on affected systems. The vendor says the attack surface was limited to publicly reachable management HTTPS interfaces and the XML…

Saugata DattaOct 30, 20263 min read33

Cybersecurity

Active exploitation of critical GitLab regex flaw forces urgent patching

Attackers have begun exploiting a maximum-severity vulnerability in GitLab that can allow remote code execution, prompting immediate warnings from GitLab and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2026-97229, stems from an integer overflow in GitLab's CI/CD Regular Expression Compiler and can be triggered by a malicious regular expression in a pipeline configuration. The flaw at a glance CVE-2026-97229 is an integer overflow weakness in…

Saugata DattaOct 30, 20262 min read33

Hacking and Exploits

North Korea’s TraderTraitor Pulls Off Crypto’s Biggest Heist: Inside the $6.36B Binance Breach

On the evening of October 29, 2026, wallets tied to Binance began sending large volumes of crypto across ten blockchains in a tightly timed operation. TRM Labs traced roughly USD 6.36 billion in outflows and attributes the attack to North Korea’s TraderTraitor unit. Stablecoin issuers and network councils froze about USD 2.7 billion, but the attacker still controls roughly USD 2.4 billion in assets that remain beyond issuers’ reach. This…

Saugata DattaOct 30, 20266 min read43

Artificial Intelligence

How a Tampered Claude Code Extension Can Give Attackers Persistent SSH Access

A recent analysis by OpenSourceMalware found a tampered Claude Code extension on Open VSX that can give attackers persistent remote access to developer systems. The altered package, identified as anthropic.claude-code version 2.1.313, injects a short JavaScript loader that runs during normal extension activity and implements an SSH backdoor, reverse tunneling, and cross-platform persistence mechanisms. The sample analyzed targeted macOS on Apple Silicon, though the injected code contains branches for Linux…

Saugata DattaOct 30, 20264 min read36

Cybersecurity

Polymarket’s Third-Party Breach: How Malicious Scripts Drained Wallets and What Traders Should Do Next

Polymarket suffered a security incident on October 29, 2026, when a compromised third‑party provider exposed international users to wallet theft. Traders reported missing funds, unexpected withdrawals, and positions being closed without permission. The company temporarily halted trading, said it fixed the issue, promised reimbursements for affected customers, and later resumed trading. What happened Hudson Rock’s technical investigation and subsequent reporting tied the incident to malicious JavaScript delivered through an address…

Saugata DattaOct 30, 20263 min read37

AWS

AWS Powers Amazon’s Record Margins While AI Spending Drains Cash Flow

Amazon’s third-quarter 2026 results painted a study in contrasts: robust top-line growth and record operating margins driven largely by AWS, paired with mounting cash-flow pressure as heavy AI investments and capital expenditures weigh on liquidity. Revenue rose to $201.9 billion, operating income jumped sharply, yet free cash flow turned negative for the trailing year—signs that Amazon is balancing a profitable core with aggressive, expensive bets on AI infrastructure. A quarter…

Saugata DattaOct 30, 20263 min read50

Artificial Intelligence

OpenAI doubles ChatGPT Pro usage limits after subscriber backlash

OpenAI reversed a planned reduction in usage allowances and instead announced it is doubling usage limits for several ChatGPT Pro tiers. The company said the change takes effect immediately and was prompted by customer feedback after earlier plans to cut included usage for some subscribers. What OpenAI announced Tibo, the face of ChatGPT and Codex on X, confirmed that OpenAI is doubling usage limits for all Pro 100, Pro 200,…

Saugata DattaOct 30, 20262 min read57

Hacking and Exploits

Binance Breach and the Race to Trace Billions in Crypto

Binance, the world’s largest cryptocurrency exchange, abruptly suspended deposits and withdrawals as it investigated a massive suspected security incident that initial reports placed in the billions of dollars. Early figures and shifting estimates have left users and industry observers scrambling for verified facts: some transfers across multiple blockchains looked suspicious, but determining what portion — if any — represents confirmed theft requires careful tracing and coordination with token issuers and…

Saugata DattaOct 30, 20263 min read42

AI Agents and Frameworks

Linux TCP use-after-free (CVE-2026-98432): Anthropic’s exploit, vendor status, and what admins should do

A serious race-condition bug in the Linux kernel’s IPv4 TCP path, tracked as CVE-2026-98432, has drawn attention because the kernel team rated it 9.8/10 on the CVSS scale and because Anthropic says its AI model wrote an exploit that achieved root command execution against servers running a multipath TCP (MPTCP) listener. Vendors and distributions have diverging severity scores and staggered patch timelines, leaving many administrators deciding whether to wait for…

Saugata DattaOct 30, 20265 min read56

Free Tools: IP, DNS, SSL