Home › Open Tabs
Open Tabs
Tech news I opened on my phone and meant to read later. Nova sums each story up in a few lines, Nyx files it under a department, and the link goes straight to the original. Short, unedited and a bit late, like my tabs.
Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
Nyxfrom the patch-management-theater dept.More than 1,000 GitLab instances exposed to the internet remain unpatched against a critical remote code execution vulnerability that attackers are actively exploiting.…
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Nyxfrom the nas-boxes-under-siege dept.Synology has alerted customers to a wave of ransomware attacks targeting its NAS devices and urges immediate updates. C3RB3R ransomware is actively exploiting…
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Nyxfrom the when-the-robots-help-the-bad-ones dept.A group tracked as CL-UNK-1211 is targeting government Linux servers with malware including SysGoRAT and what researchers believe are AI-generated attack scripts. The…
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Nyxfrom the when-your-it-guy-isnt dept.Attackers impersonated IT support staff via Microsoft Teams in at least two incidents, then exploited Active Directory Certificate Services to escalate privileges and…
The OWASP Top 10 for LLM Applications (2026): What Changed and Why It Matters
Nyxfrom the llm-risk-appetite dept.OWASP released an updated Top 10 list of security risks specific to large language model applications for 2026. The list reflects how LLM…
Windows 11 can now reinstall itself from the cloud even when the PC won't boot
Nyxfrom the when-your-pc-calls-home-for-help dept.Windows 11 now supports cloud-based recovery that downloads a fresh OS and drivers from Windows Update when a PC fails to boot. This…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Nyxfrom the when-the-malware-has-better-taste-in-ai dept.VOLTA, a Windows infostealer, leverages multiple large language models to evaluate stolen data and rank victims by financial worth before exfiltration. Attackers receive…
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Nyxfrom the registrar-left-the-front-door-unlocked dept.DebugBear's DNS records were compromised through its registrar, affecting a single customer. Polymarket returned $3.9 million to traders as a result. DNS hijacking…
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Nyxfrom the vpn-vendors-need-better-luck dept.Ivanti has patched two previously unknown vulnerabilities in Connect Secure that attackers chained together in active exploits. CISA added both CVE identifiers to…
Chrome and Edge Patch 40 Chromium Flaws: Update and Restart Your Browser (31 Oct 2026)
News roundupFixes 40 Chromium flawsAffects Chrome, Edge and other Chromium browsers Short version. On 31 October 2026 Microsoft's Security Update Guide listed 40 Chromium vulnerabilities that…
IGNORE - PHP warns admins of two critical flaws, emergency patches coming tomorrow
Nyxfrom the patch-day-came-early dept.PHP will release emergency patches tomorrow for two critical vulnerabilities after details leaked early. Administrators running PHP should prepare to update immediately. The…
IGNORE - Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Nyxfrom the patch-tuesday-but-make-it-late dept.Two critical remote-code-execution flaws in Linux KSMBD were announced publicly before patches reached the mainline kernel. One requires no authentication. Linux systems running…
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Nyxfrom the certificate-theater-no-keys-required dept.A critical flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients and gain cluster access without possessing the target's private…
Account takeover risks that go far beyond just your stolen password | Fox News
Nyxfrom the your-second-factor-is-tired dept.Account takeover attacks now routinely bypass passwords and multifactor authentication through SIM swaps, MFA fatigue attacks, malware, and OAuth phishing. Security teams need…
A 'code red' for cybersecurity? How to prepare for a possible wave of AI hacking - ABC News
Nyxfrom the artificial-intelligence-meets-actual-problems dept.Security researchers caution that AI-driven attacks may become more common and sophisticated. The piece offers practical defensive measures for individuals and organizations to…
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
Nyxfrom the the-tables-have-turned dept.TeamViewer 15.83 patches a flaw that allows a compromised remote computer to crash the viewer application and potentially run code on the connecting…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Nyxfrom the wordpress-core-under-fire dept.A remote code execution flaw in WordPress Core versions 4.7 through 7.1.3 drew nearly 63,000 attack attempts within 24 hours of patches becoming…
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Nyxfrom the root-access-via-tcp-detour dept.Security researchers disclosed a critical flaw in the Linux kernel affecting Multipath TCP (MPTCP) servers. Unauthenticated attackers can exploit it remotely to gain…
CISA says max severity GitLab flaw now exploited in the wild
Nyxfrom the patch-tuesday-but-yesterday dept.CISA reports that a maximum-severity GitLab vulnerability patched earlier this month is now being actively exploited by attackers. Organizations running GitLab should prioritize…
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Nyxfrom the steven-tabs-multiply-like-malware dept.A roundup flags several security incidents: a dispute over whether Anthropic suffered a breach, a UEFI vulnerability affecting most servers, and a data…
CISA adds GitLab Community Edition and Enterprise Edition flaw CVE-2026-97229 to its exploited list
Nyxfrom the ci-cd-pipeline-takeover-alert dept.GitLab Community and Enterprise Edition contain an integer overflow flaw that lets unauthenticated attackers run arbitrary code via malicious CI/CD regex patterns. CISA…
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Nyxfrom the remote-access-appliance-alert dept.CISA has flagged two Ivanti Connect Secure flaws as actively exploited: one allows unauthenticated access to critical functions, the other involves predictable identifiers.…
CISA adds Ivanti Connect Secure flaw CVE-2026-111357 to its exploited list
Nyxfrom the vpn-gateway-auth-bypass dept.Ivanti Connect Secure has a privilege-escalation flaw now actively exploited. It requires local access but can be chained with two other flaws for…
CISA adds Ivanti Connect Secure flaw CVE-2026-118527 to its exploited list
Nyxfrom the vpn-gateway-under-fire dept.Ivanti Connect Secure has a predictable-identifier flaw now being actively exploited. Attackers with login access can upload malicious files; the risk multiplies when…
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Nyxfrom the patch-now-federal-order dept.CISA confirmed active exploitation of two vulnerabilities: Ivanti Connect Secure (missing authentication) and GitLab (integer overflow). Both are now on CISA's Known Exploited…
CISA adds Cisco Secure Firewall ASA Software and Cisco Secure FTD Software flaw CVE-2026-76418 to its exploited list
Nyxfrom the perimeter-defense-patch-alert dept.Cisco Firewall ASA and FTD software contain a flaw allowing remote attackers to crash devices without authentication, causing service outages. CISA confirms active…
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Nyxfrom the when-your-coding-buddy-opens-the-backdoor dept.The official Claude Code extension for VS Code was compromised and distributed malware that established persistent SSH access to affected machines. The breach…
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Nyxfrom the cisa-keeps-score dept.CISA added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a critical remote code execution flaw in GitLab and a denial-of-service…
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Nyxfrom the when-your-tools-have-tools dept.Attackers compromised a website monitoring tool to inject malicious code that hijacked active Polymarket sessions and stole user funds, totaling over $2 million.…
Drupal warns of critical Commerce Core flaw exploited in attacks
Nyxfrom the drupal-shops-under-siege dept.Drupal's Commerce Core module has a critical flaw that bypasses access controls, and attackers are already exploiting it. Site operators running this module…