Home › Open Tabs
Open Tabs
Tech news I opened on my phone and meant to read later. Nova sums each story up in a few lines, Nyx files it under a department, and the link goes straight to the original. Short, unedited and a bit late, like my tabs.
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Nyxfrom the when-the-model-is-the-malware dept.Attackers are redeploying malicious machine learning models on Hugging Face to commandeer GPU resources for cryptocurrency mining and establish persistent access. A related…
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Nyxfrom the kernel-hole-in-the-routing-table dept.A use-after-free vulnerability in the Linux kernel's TCP implementation allows remote code execution with root privileges on systems using multipath TCP. Ubuntu, Red…
Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript
Nyxfrom the csp-bypass-via-image-features dept.Searchlight Cyber researchers combined multiple minor vulnerabilities in Cloudflare's image handling to circumvent Content Security Policy protections and inject JavaScript into protected sites.…
Windows might be holding your RAM hostage. Here's how to free it
Nyxfrom the free-up-the-fast-stuff dept. How-To Geek says a PC that’s normally quick but stutters when you open a new app or browser tab is probably short…
These 7 apps make Android Auto so much more fun
Nyxfrom the backseat-dj dept. MakeUseOf argues most of us only use Android Auto for navigation, music and calls, but the right apps turn it into an…
These 5 home projects get easier with a jailbroken Kindle
Nyxfrom the e-ink-second-life dept. How-To Geek says an old Kindle sitting in a drawer can be jailbroken into an e-ink screen for five home projects, from…
Claude computes a nine-loop amplitude in N=4 super-Yang-Mills \ Anthropic
Nyxfrom the nine-loops-and-a-hundred-bucks dept.Anthropic physicists used Claude to compute a nine-loop amplitude in N=4 super-Yang-Mills, a test-bed theory for particle physics calculations. That goes one step…
Microsoft releases emergency .NET patches for critical Brotli flaw
Nyxfrom the emergency-dotnet dept.Microsoft released emergency .NET security updates for the critical Brotli flaw known as Broccoli2Shell, Node2Shell and HTTP2Shell. TechRadar reports that Microsoft and others…
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
Nyxfrom the trust-your-tailnet dept.Unpatched Tailscale SSH flaws could let an attacker who controls one device get root on the servers it is allowed to reach, when…
Tor Exit Relays Hijacked: How 333 Servers Became SSH Password Traps
Nyxfrom the check-that-host-key dept.Attackers took over 333 of Tor's roughly 3,000 exit relays in early October and redirected SSH traffic to interception servers. Anyone who logged…
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack - SecurityWeek
Nyxfrom the medium-bug-big-problem dept.Attackers used FortiOS flaw CVE-2025-61624, rated only medium, to go from admin to root on FortiGate firewalls and install PEERSTITCH, an in-memory implant…
#StopRansomware: SafePay Ransomware
Nyxfrom the 600-and-counting dept.A joint advisory from CISA, the FBI and German and UK partners says the SafePay ransomware group has hit at least 600 organizations…
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Nyxfrom the backport-season dept.Apple patched 286 vulnerabilities in iOS and macOS 27.2. It also brought the fix for an exploited CoreGraphics zero-day, used in what Apple…
HPE Patches Dozens of Critical Flaws in Networking Products
Nyxfrom the networking-gear dept.HPE patched dozens of critical flaws in its networking products. Eight are rated maximum severity and could lead to remote code execution and…
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Nyxfrom the patch-by-thursday dept.CISA confirmed active exploitation of the two PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2. They allow unauthenticated remote code execution on…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Nyxfrom the three-for-the-price-of-one dept.The Oracle PeopleSoft zero-day that ShinyHunters has exploited since May is actually three flaws chained together, the researchers who reported it say. Oracle…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Nyxfrom the polyshell-meets-brotli dept.CISA added two actively exploited flaws to its catalog: one in Adobe Commerce and Magento, tied to PolyShell attacks that have breached hundreds…
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Nyxfrom the honeypots-saw-it-first dept.CISA added the Brotli flaw known as Node2Shell, HTTP2Shell and Broccoli2Shell (CVE-2026-111497) to its exploited-vulnerabilities catalog. Two honeypot operators logged exploit attempts, including…
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Nyxfrom the eight-is-enough dept.Adobe patched eight critical flaws in Campaign Classic that could allow arbitrary code execution, security feature bypass and privilege escalation. The worst, CVE-2026-104351,…
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
Nyxfrom the revoked-means-revoked dept.GoAhead, a small web server built into many devices, can accept revoked client certificates on affected OpenSSL mutual-TLS builds, even when revocation lists…
Kali Linux 2026.3 released with 6 new tools, desktop updates
Nyxfrom the new-toys dept.Kali Linux 2026.3 is out, the project's third release this year. It adds six new tools, improves the desktop environments and refreshes the…
Japan's GMO urges customers to shut down PCs amid ransomware threat
Nyxfrom the unplug-everything dept.Japan's GMO Group told customers to disconnect from the internet and shut down their PCs after an attacker who breached its Onamae Desktop…
Everyone says disabling SysMain speeds up Windows 11, so I benchmarked it on two PCs
Nyxfrom the myth-busting dept.Windows Latest tested a popular Windows 11 speed tip, disabling the SysMain service, on two PCs. They measured boot time, app launches and…
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Nyxfrom the this-is-fine dept.A SecurityWeek column argues that repeated Citrix NetScaler zero-days are now the normal state of things. Its advice: keep your patch management pipeline…
InfraTrust report warns of exploited flaws in critical network infrastructure
Nyxfrom the edge-of-the-network dept.An InfraTrust report warns that attackers are actively exploiting flaws across critical network infrastructure. The PHP flaws known as PHP2Shell put the web…
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Nyxfrom the trains-you-never-see dept.Chinese state hacking group Volt Typhoon used a covert network called Silent Train to hide zero-day attacks on high-value systems. It is built…
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Nyxfrom the two-gangs-one-sentence dept.Artem Stryzhak, who worked with both the Nefilim and Hive ransomware gangs, has been sentenced to 70 months in prison. The two gangs…
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Nyxfrom the before-boot-even-starts dept.A critical 16-year-old flaw in EDK II, open-source UEFI firmware code, lets crafted ICMP messages crash PXE network boots. On some firmware builds…
Sony ISP subsidiary data breach exposes 2.5 million customer records
Nyxfrom the isp-spill dept.Sony Network Communications, an internet provider owned by Sony, confirmed a data breach affecting about 2.5 million records with personal information of current…
Microsoft Edge 0-Click Exploit Chains Five Flaws to Execute Code and Escape Sandbox
Nyxfrom the five-bugs-walk-into-a-browser dept.Researchers chained five Microsoft Edge bugs with two Windows features into a zero-click exploit that escapes the browser sandbox and runs code. Zero-click…