Hacking and Exploits

Web-Hacking, 0-Day, Malware, Ransomware, Exploit, Vulnerabilities, Privilege-Flaw, Privilege-Escalation, Zero-Day, Exploit, Jailbreak, Penetration-Testing, Trojan, Spyware, Rootkit, Worm, Backdoor, Payload, Obfuscation, DDoS, Phishing, MITM, Spoofing, Brute-force, Port-Scan, SQLi, XSS, CSRF, Path-Traversal, LFI, RFI, Insecure-Deserialization, Buffer-Overflow, CVE, Exploit-Kit, Shellcode, bug bounty, ethical hacking, CTF, capture the flag, offensive security, red team exercise, exploit development, reverse engineering, vulnerability research, credential harvesting, zero-click, hack

Page 2

Cybersecurity

Critical GoAhead TLS flaws put millions of embedded devices at risk

Three newly disclosed vulnerabilities in the GoAhead embedded web server weaken how some devices validate certificates and protect encrypted sessions. Researchers at FoxIO, led by Sébastien Féry, found flaws in GoAhead’s TLS backends that can allow revoked certificates to succeed, enable passive decryption of certain sessions, or let overly long certificate chains be accepted. The issues affect devices that embed GoAhead—found in routers, printers, gateways and industrial controllers from vendors…

Saugata DattaOct 28, 20264 min read32

Cybersecurity

Breaking the Ransomware Chain: Flashpoint’s 2026 Survival Guide

Ransomware is scaling faster than many organizations anticipated. In the first half of 2026, Flashpoint tracked 6,256 ransomware incidents — a 45% jump from 2025 — driven by expanding Ransomware-as-a-Service (RaaS) ecosystems, commoditized tooling, and growing use of AI. For security leaders, threat hunters, and intelligence teams, understanding how these operations form and where they can be interrupted has become a business-critical priority. Why ransomware is surging Flashpoint’s analysis points…

Saugata DattaOct 27, 20262 min read43

Hacking and Exploits

Tailscale’s “Tailworm”: 11 SSH Flaws That Can Lead to Root Escalation

Tailscale is racing to patch a cluster of serious vulnerabilities discovered in its software after security researchers found flaws that could let attackers steal credentials, crash servers, and even gain root privileges on targeted systems. The issues, disclosed by Cyberdione Labs and collectively dubbed "Tailworm," affect released builds of Tailscale and the self-hosted headscale control server and have prompted urgent mitigation guidance from Tailscale while fixes are prepared. What was…

Saugata DattaOct 27, 20265 min read33

Cybersecurity

Critical Brotli Flaw Hits PAN-OS Firewalls — Palo Alto Issues Workarounds and Hotfix Timeline

Palo Alto Networks has confirmed a serious vulnerability in the Brotli compression decoder that affects certain PAN-OS firewall deployments and the Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497 with a CVSS score of 9.2, the flaw can lead to out-of-bounds memory writes that may allow attackers to corrupt memory, expose sensitive data, crash services, or — in some circumstances — execute code without authentication. Palo Alto’s advisory, published…

Saugata DattaOct 27, 20263 min read34

AI Agents and Frameworks

Breach by Design: How AI Agents Mapped a Path into Anthropic’s Business Systems

Cathedral, a new cybersecurity startup, used AI agents to find routes into Anthropic’s internal business systems in under 12 hours during an authorized security test. The researchers accessed a limited set of administrative systems—sales, HR and IT tools—pulling meeting transcripts, salary and job-offer details, and internal Slack messages. Anthropic confirmed the access was limited to business applications and said its core AI assets—model weights, source code, and customer prompts—were not…

Saugata DattaOct 27, 20263 min read40

Cybersecurity

Urgent PHP Windows Builds Patch Critical HTTP2Shell Vulnerability

The PHP project has released updated Windows builds to mitigate a serious flaw known as HTTP2Shell. Announced on October 26, 2026, the new packages are PHP 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1; each Windows build now includes an updated Brotli library (1.2.1) that fixes CVE-2026-111497. Administrators running PHP on Windows should treat these updates as urgent and apply them promptly. Release details The "-1" suffix in the version numbers denotes Windows…

Saugata DattaOct 27, 20263 min read43

Cloudflare

Cloudflare Issues Emergency WAF Rules for CVE-2026-111497 Brotli Flaw

Cloudflare has released an emergency Web Application Firewall (WAF) ruleset update tied to CVE-2026-111497, a memory flaw in Node.js’s Brotli decoder. Published on October 25, 2026, the update adds two new detections designed to surface potentially risky traffic related to the vulnerability while leaving blocking decisions to customers by default. What Cloudflare added The release introduces two rules: one that detects requests declaring a Brotli-compressed request body and another that…

Saugata DattaOct 26, 20263 min read45

Hacking and Exploits

Tailworm: New Tailscale SSH Flaws Enable Rapid Root Escalation Across Trusted Devices

A security researcher has published a report — dubbed "Tailworm" — that describes multiple vulnerabilities in Tailscale’s SSH implementation and related components which, in lab tests, allowed an attacker on one compromised device to rapidly gain root on other machines across a private Tailscale mesh. The findings raise questions about how privilege is handled inside tailscaled and call attention to administrative rules and configurations that can turn a single foothold…

Saugata DattaOct 25, 20265 min read50

Cybersecurity

How Eye Security Quietly Disabled a Dangerous Popcorn Time Updater on Millions of Machines

Between November 2025 and March 2026, Dutch security firm Eye Security pushed more than two million non-destructive updates to machines running an abandoned Popcorn Time fork in a bid to disable a background updater that could have let an outsider take over those computers. The updater — found as Updater.exe on Windows and PT.updd on macOS — routinely checked long-abandoned web addresses and installed whatever it was served with SYSTEM…

Saugata DattaOct 24, 20264 min read79

Cloud Computing

Microsoft Teams adds context-aware AI to detect phishing in chats

Microsoft is rolling out an AI-powered, context-aware phishing detection feature in Teams intended to spot phishing, social engineering, impersonation attempts, and deceptive intent by analyzing conversation context rather than relying solely on traditional indicators like malicious links or files. The company announced the capability in a Microsoft 365 Message Center update and indicated the rollout will begin in early November 2026 as a targeted release, with broader availability expected between…

Saugata DattaOct 24, 20262 min read82

Cybersecurity

Brotli Decoder Bug Sparks Cross-Platform RCE Risk — What to Know and Do

A memory-corruption flaw in Google's Brotli decoder (tracked as CVE-2026-111497) has rippled through numerous runtimes and libraries that embed the decoder, creating potential crash, memory-leak, or remote code execution vectors when untrusted Brotli-compressed data is processed. The issue was disclosed on October 21 after fixes began appearing in Node.js and Google’s Brotli source, and researchers from Imperva demonstrated code execution against an unpatched Node.js build. No confirmed in-the-wild exploitation has…

Saugata DattaOct 24, 20264 min read84

Cybersecurity

CISA Flags Two High-Severity Flaws: Collabora CODE and Arista VeloCloud Targeted in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after reports of active exploitation. Both flaws carry very high CVSS scores and have been observed in real-world attacks, prompting public advisories and vendor patches in September and October 2026. The vulnerabilities at a glance CVE-2026-110447 (CVSS 9.2) — An operating system command injection in Collabora Online’s Built-in CODE Server…

Saugata DattaOct 24, 20262 min read88

Free Tools: IP, DNS, SSL