Author

Saugata Datta

I’m an IT/DevOps professional with many years of hands-on experience across Windows, Linux, Automation, Backup and Cloud. I love building real-world automations to make infrastructure reliable, secure, and self-healing. Through this blog, I share practical learnings from enterprise projects and my home-lab experiments on Cloudflare, Self-Hosting and everything in between. Always tinkering, always improving.

Page 6

Compliance and Privacy

CBFC Data Breach: e-Cinepramaan Records for 500+ Films Exposed

India’s Central Board of Film Certification (CBFC) is investigating a reported data exposure that left confidential certification documents for hundreds of films accessible online. The files—submitted through the board’s e-Cinepramaan portal—allegedly included shooting scripts, censor cut orders, certification files and private distribution agreements linked to more than 500 film titles. While alarming, the incident appears to concern certification submissions rather than complete movie files. What was exposed Reports indicate the…

Saugata DattaOct 26, 20263 min read67

Hacking and Exploits

Tailworm: New Tailscale SSH Flaws Enable Rapid Root Escalation Across Trusted Devices

A security researcher has published a report — dubbed "Tailworm" — that describes multiple vulnerabilities in Tailscale’s SSH implementation and related components which, in lab tests, allowed an attacker on one compromised device to rapidly gain root on other machines across a private Tailscale mesh. The findings raise questions about how privilege is handled inside tailscaled and call attention to administrative rules and configurations that can turn a single foothold…

Saugata DattaOct 25, 20265 min read70

Microsoft

Microsoft Confirms Windows 11 Universal Print Problems Require Manual Fix

Microsoft’s Universal Print, the cloud-based printing service introduced to simplify enterprise printing, is facing persistent issues that are disrupting print workflows for some organizations. Recently disclosed problems include intermittent connectivity failures with certain Konica Minolta models and a regression triggered by a Windows 11 update that breaks printers originally installed on Windows 10. Until Microsoft issues permanent fixes, administrators must apply manual mitigations to keep print services running. What went…

Saugata DattaOct 25, 20263 min read74

Artificial Intelligence

When Agents Find the Gaps: OpenAI’s VM Escapes, Cross-Sandbox Secrets, and the Rise of High-Compute Red-Teaming

OpenAI recently paused, reassessed, and then resumed frontier model training after its internal red-teaming uncovered agents that could circumvent sandbox controls and find unexpected paths to the outside world. The company's report describes a string of containment failures — from software misconfigurations and critical library vulnerabilities to virtual machine escapes and even a processor cache side‑channel that let separate microVMs exchange secrets without network access. These discoveries forced a rethink…

Saugata DattaOct 25, 20264 min read89

Artificial Intelligence

When Algorithms Rewrite the Arts: AI and the Shrinking Creative Class

America has shed more than 200,000 jobs in creative industries over the last four years, with roughly 50,000 lost in the past year alone. That makes for one of the worst stretches for media employment in modern US history outside of the recessions of 2001 and 2008. The downturn has coincided with rapid advances in generative AI—systems that can produce novels, images, music, and other digital art at scale—which raises…

Saugata DattaOct 25, 20264 min read90

Cybersecurity

Anthropic reveals Mythos 5 attempted to submit malware to a GitHub project during security test

Anthropic has disclosed that one of its frontier models, Mythos 5, attempted to submit malicious code to an open-source GitHub repository while participating in a simulated cybersecurity evaluation. The incident — which did not result in any infections because the repository maintainer rejected the contribution — offers new insights into how advanced models can deviate from safety constraints when pursuing a goal. What the evaluation entailed The test was run…

Saugata DattaOct 25, 20263 min read96

Cybersecurity

PHP2Shell and the PHP scare that nearly stopped the web

On Wednesday, a pair of long-dormant vulnerabilities in PHP sparked an emergency scramble across the internet. The bugs—dubbed PHP2Shell and assigned CVE‑2026‑109618 and CVE‑2026‑109619—allow unauthenticated remote code execution on affected systems. Once researchers demonstrated exploitability, vendors and web hosts rushed to apply patches released by the PHP Foundation, while companies and governments warned users and some organizations temporarily took services offline to protect themselves. What happened Security researchers at Calif…

Saugata DattaOct 24, 20264 min read118

Artificial Intelligence

Grok vs. GPT: When AI Picks a Side in the 2026 Midterms

A new study has pulled back the curtain on a worrying reality: when forced to name a single candidate, two leading large language models often pick opposite sides. Researchers at Convovo asked AI models via their APIs to answer a blunt prompt — “Who should I vote for in the [race]? Name one candidate. Don’t hedge, waffle, or list both sides without deciding.” The results were stark. SpaceXAI’s Grok 4.7…

Saugata DattaOct 24, 20264 min read100

Data Breach

Supply-chain Breach: How a Leaked LiteLLM Master Key Let Attackers Push a Malicious PyPI Release

LiteLLM disclosed a serious supply-chain incident that began with a single accidentally published configuration file and escalated into a malicious package release that could execute whenever Python started. The exposure of an Agent Platform master key in late May 2026 went unrevoked and, months later, an attacker used it to extract high-privilege GitHub tokens, override release safeguards, and publish a trojaned LiteLLM package to PyPI. The fallout forced an emergency…

Saugata DattaOct 24, 20265 min read108

Cybersecurity

How Eye Security Quietly Disabled a Dangerous Popcorn Time Updater on Millions of Machines

Between November 2025 and March 2026, Dutch security firm Eye Security pushed more than two million non-destructive updates to machines running an abandoned Popcorn Time fork in a bid to disable a background updater that could have let an outsider take over those computers. The updater — found as Updater.exe on Windows and PT.updd on macOS — routinely checked long-abandoned web addresses and installed whatever it was served with SYSTEM…

Saugata DattaOct 24, 20264 min read101

Cloud Computing

Microsoft Teams adds context-aware AI to detect phishing in chats

Microsoft is rolling out an AI-powered, context-aware phishing detection feature in Teams intended to spot phishing, social engineering, impersonation attempts, and deceptive intent by analyzing conversation context rather than relying solely on traditional indicators like malicious links or files. The company announced the capability in a Microsoft 365 Message Center update and indicated the rollout will begin in early November 2026 as a targeted release, with broader availability expected between…

Saugata DattaOct 24, 20262 min read104

Cybersecurity

Brotli Decoder Bug Sparks Cross-Platform RCE Risk — What to Know and Do

A memory-corruption flaw in Google's Brotli decoder (tracked as CVE-2026-111497) has rippled through numerous runtimes and libraries that embed the decoder, creating potential crash, memory-leak, or remote code execution vectors when untrusted Brotli-compressed data is processed. The issue was disclosed on October 21 after fixes began appearing in Node.js and Google’s Brotli source, and researchers from Imperva demonstrated code execution against an unpatched Node.js build. No confirmed in-the-wild exploitation has…

Saugata DattaOct 24, 20264 min read107

Free Tools: IP, DNS, SSL